Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c4d783-6875-4ab5-a1aa-6ed0613e9f31", "record_id": "flaws_cloudtrail:0000000:40c4d783-6875-4ab5-a1aa-6ed0613e9f31", "row_index": 0, "timestamp": "2019-06-13T10:25:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c4d783-6875-4ab5-a1aa-6ed0613e9f31", "eventTime": "2019-06-13T10:25:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzQTVOV3JzbWNoNUFtQTRvbE9pZ05PSHErdFpHaDdFOVZlZ3ZRcG5KNWMzbkRQTy9QTXBjNThqemt0NEx6VXJKWE4xam9GcGJRWTZjdTlrbDBXR3BEWHF2a0hjOFUzdC9Od01PeWg2dVNuYnZEbmwvWmRTWW5rUDNJbEF2NUY4OVdsMHh4YVFnL1F4Rk81MlZTZ3BkVEx3V1ZPb3V1VHkvTUQvaldEZW81SUFwc2RWbnNXVWJBajhjOGoxSE5RV0ZLQVNCQitzVSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a060e519-4783-48c2-b858-b41d3adcdd9d", "record_id": "flaws_cloudtrail:0000001:a060e519-4783-48c2-b858-b41d3adcdd9d", "row_index": 1, "timestamp": "2019-06-13T10:25:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a060e519-4783-48c2-b858-b41d3adcdd9d", "eventTime": "2019-06-13T10:25:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXNVhyQTEwcWkrQWowRHEvTTh4KzFsME9NYUk4VXJDMkJQK1o5ajU1bHY0YVBBdHZBVUI3TnJLZkZHNm91Z3ladGlZNVpCVDJUVXRTN21Oa3dSNXRNTWwzaEJsNS9JZHd2N3pWNWJxWi93QmFSdFo2RzVDOXI2K3AyeFI5TzFzR2sxUEVVMHAxb3ZuQy9QbTd4K2kwYmFMYit5U3BCKy83VnZNZS9ZSUQ1b0RFOFhlclY1UFRLUy9oYzloMzUyUFM0SndHMGhPY2ZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a060e519-4783-48c2-b858-b41d3adcdd9d", "record_id": "flaws_cloudtrail:0000002:a060e519-4783-48c2-b858-b41d3adcdd9d", "row_index": 2, "timestamp": "2019-06-13T10:25:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a060e519-4783-48c2-b858-b41d3adcdd9d", "eventTime": "2019-06-13T10:25:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXNVhyQTEwcWkrQWowRHEvTTh4KzFsME9NYUk4VXJDMkJQK1o5ajU1bHY0YVBBdHZBVUI3TnJLZkZHNm91Z3ladGlZNVpCVDJUVXRTN21Oa3dSNXRNTWwzaEJsNS9JZHd2N3pWNWJxWi93QmFSdFo2RzVDOXI2K3AyeFI5TzFzR2sxUEVVMHAxb3ZuQy9QbTd4K2kwYmFMYit5U3BCKy83VnZNZS9ZSUQ1b0RFOFhlclY1UFRLUy9oYzloMzUyUFM0SndHMGhPY2ZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e89d30b4-a559-4b34-a7b8-6f0ee46088c5", "record_id": "flaws_cloudtrail:0000003:e89d30b4-a559-4b34-a7b8-6f0ee46088c5", "row_index": 3, "timestamp": "2019-06-13T10:25:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e89d30b4-a559-4b34-a7b8-6f0ee46088c5", "eventTime": "2019-06-13T10:25:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3WjNlM1JqbTJSSDRCSkFjZ0ZncEZpTTRvME45SG4vTzc0ZkJ0OXJhVG85cmZmcmlmT21CeWxMOEtTZWRDWStRZ2hwWnkzZ2taRG5pelJhZmF3eVZuZHV2bGlOcHBGYkFhczdpYW1zamk2azNob2svekpWdnc1V2x2OXYybERnaktWRzFrSFI5THBNYWxnbFNDZmxBYzA1UWZJUG1IdytDQlRSVzZtYXZQYXBSdUdCeDRlUkhrWThzbjdWMno1OUtuWEZXRk1UcjNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e89d30b4-a559-4b34-a7b8-6f0ee46088c5", "record_id": "flaws_cloudtrail:0000004:e89d30b4-a559-4b34-a7b8-6f0ee46088c5", "row_index": 4, "timestamp": "2019-06-13T10:25:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e89d30b4-a559-4b34-a7b8-6f0ee46088c5", "eventTime": "2019-06-13T10:25:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3WjNlM1JqbTJSSDRCSkFjZ0ZncEZpTTRvME45SG4vTzc0ZkJ0OXJhVG85cmZmcmlmT21CeWxMOEtTZWRDWStRZ2hwWnkzZ2taRG5pelJhZmF3eVZuZHV2bGlOcHBGYkFhczdpYW1zamk2azNob2svekpWdnc1V2x2OXYybERnaktWRzFrSFI5THBNYWxnbFNDZmxBYzA1UWZJUG1IdytDQlRSVzZtYXZQYXBSdUdCeDRlUkhrWThzbjdWMno1OUtuWEZXRk1UcjNRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e963162-4cf7-42fa-a5d0-41b75c390307", "record_id": "flaws_cloudtrail:0000005:0e963162-4cf7-42fa-a5d0-41b75c390307", "row_index": 5, "timestamp": "2019-06-13T10:25:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e963162-4cf7-42fa-a5d0-41b75c390307", "eventTime": "2019-06-13T10:25:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOY0dmWmM0dGsxcHJJRkJKNGk2OERIenRZYnI0YWlLWlNhSU9PbERzbGRSS0paZ1NmaHJ0VzJJUmQ2UmVzSEc4b24yeFFvdDZ2QmNQeloxUFIyUnVXVU43OENZUTZJNExFcmVxelk1K3dleDUwajVqSHRDRTcwemQ5YzJZNGN2Y0FscVpHQlFQcDRaTjhyMXcway9iK1FoVm45N3R1MGZocEJOeXlIK1FURUJsUjJUZ2VVMnB3ZS9uZVN2Z0VxamRWSHVqNldLUG4wZjljdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e963162-4cf7-42fa-a5d0-41b75c390307", "record_id": "flaws_cloudtrail:0000006:0e963162-4cf7-42fa-a5d0-41b75c390307", "row_index": 6, "timestamp": "2019-06-13T10:25:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e963162-4cf7-42fa-a5d0-41b75c390307", "eventTime": "2019-06-13T10:25:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOY0dmWmM0dGsxcHJJRkJKNGk2OERIenRZYnI0YWlLWlNhSU9PbERzbGRSS0paZ1NmaHJ0VzJJUmQ2UmVzSEc4b24yeFFvdDZ2QmNQeloxUFIyUnVXVU43OENZUTZJNExFcmVxelk1K3dleDUwajVqSHRDRTcwemQ5YzJZNGN2Y0FscVpHQlFQcDRaTjhyMXcway9iK1FoVm45N3R1MGZocEJOeXlIK1FURUJsUjJUZ2VVMnB3ZS9uZVN2Z0VxamRWSHVqNldLUG4wZjljdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7310cc5d-416d-4bfa-ac22-810888b2e97db", "record_id": "flaws_cloudtrail:0000007:7310cc5d-416d-4bfa-ac22-810888b2e97db", "row_index": 7, "timestamp": "2019-06-13T10:25:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7310cc5d-416d-4bfa-ac22-810888b2e97db", "eventTime": "2019-06-13T10:25:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGUjdPMzljM2FLbzdKb2ZaWXZMZ1NRM0src2h6c05CaE1DVjUzRUEyMUxBVWhFZXRVTU5CWGJlUittcm9WOHJTMEh4OTRiRXFVbFZkUS9hcC9rbzltQWxGZThrL3dUT3V1Z09Dakh2U1hYRVVtUmNPMzdPZ0pRQ0xhcmJDTUdGLzlKT0MxbStrSndMbTY1VzhINkRjOGUzQkJnOEwwcVZtZ3FJY0xrUXhSYkdHdGJ3bzJiWEZ2NHpnaGlhWDBreE1heEYySlVyMVI1MD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7310cc5d-416d-4bfa-ac22-810888b2e97db", "record_id": "flaws_cloudtrail:0000008:7310cc5d-416d-4bfa-ac22-810888b2e97db", "row_index": 8, "timestamp": "2019-06-13T10:25:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7310cc5d-416d-4bfa-ac22-810888b2e97db", "eventTime": "2019-06-13T10:25:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGUjdPMzljM2FLbzdKb2ZaWXZMZ1NRM0src2h6c05CaE1DVjUzRUEyMUxBVWhFZXRVTU5CWGJlUittcm9WOHJTMEh4OTRiRXFVbFZkUS9hcC9rbzltQWxGZThrL3dUT3V1Z09Dakh2U1hYRVVtUmNPMzdPZ0pRQ0xhcmJDTUdGLzlKT0MxbStrSndMbTY1VzhINkRjOGUzQkJnOEwwcVZtZ3FJY0xrUXhSYkdHdGJ3bzJiWEZ2NHpnaGlhWDBreE1heEYySlVyMVI1MD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb1a4411-5b75-4fdb-9361-4f82c864961df", "record_id": "flaws_cloudtrail:0000009:bb1a4411-5b75-4fdb-9361-4f82c864961df", "row_index": 9, "timestamp": "2019-06-13T10:25:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb1a4411-5b75-4fdb-9361-4f82c864961df", "eventTime": "2019-06-13T10:25:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHMzh2UlZJQ1JSWlJOeXRtekdXaUdyNnNRVzgrZFQ0SkZKK3hTZmQ5a09wUFhSdXBXMWw1RXVaSFJnRjlMV3g4U290RkJGVlQ2QTdRTHJGSDJVREhTMXZzZUFpSkRReUpJbUcxQm9nVkdqUHBmdEU2OStJNlpzU1k4cytCN05Cd2IrUHBHWDdxS05XQU03eWlLRGwzdWdhNFRBelZjdGo1RU5yZGtDbEZzclMzRW90MEJCOEJ5T1hMKzdDVFpiSU5rbmZPWFNlSkFDM2R3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb1a4411-5b75-4fdb-9361-4f82c864961df", "record_id": "flaws_cloudtrail:0000010:bb1a4411-5b75-4fdb-9361-4f82c864961df", "row_index": 10, "timestamp": "2019-06-13T10:25:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb1a4411-5b75-4fdb-9361-4f82c864961df", "eventTime": "2019-06-13T10:25:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHMzh2UlZJQ1JSWlJOeXRtekdXaUdyNnNRVzgrZFQ0SkZKK3hTZmQ5a09wUFhSdXBXMWw1RXVaSFJnRjlMV3g4U290RkJGVlQ2QTdRTHJGSDJVREhTMXZzZUFpSkRReUpJbUcxQm9nVkdqUHBmdEU2OStJNlpzU1k4cytCN05Cd2IrUHBHWDdxS05XQU03eWlLRGwzdWdhNFRBelZjdGo1RU5yZGtDbEZzclMzRW90MEJCOEJ5T1hMKzdDVFpiSU5rbmZPWFNlSkFDM2R3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a818c4-1bd7-4b41-8d64-69aedb0187bb", "record_id": "flaws_cloudtrail:0000011:b3a818c4-1bd7-4b41-8d64-69aedb0187bb", "row_index": 11, "timestamp": "2019-06-13T10:25:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a818c4-1bd7-4b41-8d64-69aedb0187bb", "eventTime": "2019-06-13T10:25:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5NHNOeHBST3h4MlJMUWN3c2dsU1Z5SmI0dGtVNk51OWJqMzlCNktldlZyR0hOV0dTYlZSbUxhckROMGZMeHUzZzJhQnFiTG85RVhEZ3JyVUtGRThmUWtrV1RBTnJnLytBNjg1T2UwYmJpZmhocko1YUIrRzhzRStRZEJ2blZsLzBvWDZGWERNUDVnelBDV0lrNVFPQWIyMitXMjVBdjFUTVp5NFM3b2tUUjI2REprTGU0YmtBZVBXNTlWT3JTSnM0dGdpYk91a3FuZVBQQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a818c4-1bd7-4b41-8d64-69aedb0187bb", "record_id": "flaws_cloudtrail:0000012:b3a818c4-1bd7-4b41-8d64-69aedb0187bb", "row_index": 12, "timestamp": "2019-06-13T10:25:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a818c4-1bd7-4b41-8d64-69aedb0187bb", "eventTime": "2019-06-13T10:25:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5NHNOeHBST3h4MlJMUWN3c2dsU1Z5SmI0dGtVNk51OWJqMzlCNktldlZyR0hOV0dTYlZSbUxhckROMGZMeHUzZzJhQnFiTG85RVhEZ3JyVUtGRThmUWtrV1RBTnJnLytBNjg1T2UwYmJpZmhocko1YUIrRzhzRStRZEJ2blZsLzBvWDZGWERNUDVnelBDV0lrNVFPQWIyMitXMjVBdjFUTVp5NFM3b2tUUjI2REprTGU0YmtBZVBXNTlWT3JTSnM0dGdpYk91a3FuZVBQQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "956710fa-4de7-46e9-9afe-43c8474c1367", "record_id": "flaws_cloudtrail:0000013:956710fa-4de7-46e9-9afe-43c8474c1367", "row_index": 13, "timestamp": "2019-06-13T10:25:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "956710fa-4de7-46e9-9afe-43c8474c1367", "eventTime": "2019-06-13T10:25:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0UmNPeWlnQytZNGYwalN3ekZPOEkxTnVNcUNNaEtnRGdzRjJ2VjFWNlRDTFBxM0F6dkpUYWcwZUlYcGI4MDZXRDFLQjBYdGMxR0pEelFPNHhOZ3RuMEc4clFXSWpiNVZ5a25TYzRnR2plUGRvR1YxdFdZNFhJMHA3MUs5eWQ2MkIwRU4reDBwQnBEUTdvN3lUd2dRejR3SHRod0FROFNYQnpFQWlidVUrK3F6ZTZNZ2VvNFUwU2JPTnFTL0l2Q1FMbDJ3bTlIenEzc2plQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "956710fa-4de7-46e9-9afe-43c8474c1367", "record_id": "flaws_cloudtrail:0000014:956710fa-4de7-46e9-9afe-43c8474c1367", "row_index": 14, "timestamp": "2019-06-13T10:25:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "956710fa-4de7-46e9-9afe-43c8474c1367", "eventTime": "2019-06-13T10:25:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0UmNPeWlnQytZNGYwalN3ekZPOEkxTnVNcUNNaEtnRGdzRjJ2VjFWNlRDTFBxM0F6dkpUYWcwZUlYcGI4MDZXRDFLQjBYdGMxR0pEelFPNHhOZ3RuMEc4clFXSWpiNVZ5a25TYzRnR2plUGRvR1YxdFdZNFhJMHA3MUs5eWQ2MkIwRU4reDBwQnBEUTdvN3lUd2dRejR3SHRod0FROFNYQnpFQWlidVUrK3F6ZTZNZ2VvNFUwU2JPTnFTL0l2Q1FMbDJ3bTlIenEzc2plQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d573775-9042-4452-b8e4-4829c7448a9a", "record_id": "flaws_cloudtrail:0000015:6d573775-9042-4452-b8e4-4829c7448a9a", "row_index": 15, "timestamp": "2019-06-13T10:25:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d573775-9042-4452-b8e4-4829c7448a9a", "eventTime": "2019-06-13T10:25:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvZEFuVUJxb2pRMTlEZTN2S2c1VERSN21uenNHT3pwQ2hqc00vcTNPYjhpU3ZuR3FUU3hZeVZlS29raEFTb0NBT0FKZm4rK2ttQ2JLT2pxSmEyQkE5OWMvZlRIeXRYdS9YU0tocDZrWFZhTGkrdWJrZ1RHNXJrWmttRU00ZWsxUGkrUSsvbkZjUmxpQUJEcllHRGdjb0p6WFdpVVRSR2o1dmpFVlE3ZElKYXp4R0lqdi9WMjBPMXE4N0ZoZ1NidFA1NVc1QXhhd29zT0hnUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d573775-9042-4452-b8e4-4829c7448a9a", "record_id": "flaws_cloudtrail:0000016:6d573775-9042-4452-b8e4-4829c7448a9a", "row_index": 16, "timestamp": "2019-06-13T10:25:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d573775-9042-4452-b8e4-4829c7448a9a", "eventTime": "2019-06-13T10:25:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvZEFuVUJxb2pRMTlEZTN2S2c1VERSN21uenNHT3pwQ2hqc00vcTNPYjhpU3ZuR3FUU3hZeVZlS29raEFTb0NBT0FKZm4rK2ttQ2JLT2pxSmEyQkE5OWMvZlRIeXRYdS9YU0tocDZrWFZhTGkrdWJrZ1RHNXJrWmttRU00ZWsxUGkrUSsvbkZjUmxpQUJEcllHRGdjb0p6WFdpVVRSR2o1dmpFVlE3ZElKYXp4R0lqdi9WMjBPMXE4N0ZoZ1NidFA1NVc1QXhhd29zT0hnUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f405c0b4-4345-4669-8358-fa8ea470d971", "record_id": "flaws_cloudtrail:0000017:f405c0b4-4345-4669-8358-fa8ea470d971", "row_index": 17, "timestamp": "2019-06-13T10:25:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f405c0b4-4345-4669-8358-fa8ea470d971", "eventTime": "2019-06-13T10:25:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSVnpwZG0wbExuS0FxekQ4VlVVZnk5ZkNweitXVnJvdHB6WUx1Qm8wNVk3dnJyKzJmbHViWXdqNXZkM2VBZHN3QUFldHM0WWpCUDY1VlJST3VaZWNYK0JsekZHeG55RW5QM2JGc2JQNjlxR3hwMnNGSTl5dGhzdEtNWjJ6TVQwTzgyZmZTZTZNL1ZNNlJUVXVkTHE5YTMvQy9xYWl3bHBnSmluNERLZjFVWkJoWjBEYVRiVGdhYjRmT21Yb05SeUsrWFU3S2RaSEtBYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f405c0b4-4345-4669-8358-fa8ea470d971", "record_id": "flaws_cloudtrail:0000018:f405c0b4-4345-4669-8358-fa8ea470d971", "row_index": 18, "timestamp": "2019-06-13T10:25:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f405c0b4-4345-4669-8358-fa8ea470d971", "eventTime": "2019-06-13T10:25:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSVnpwZG0wbExuS0FxekQ4VlVVZnk5ZkNweitXVnJvdHB6WUx1Qm8wNVk3dnJyKzJmbHViWXdqNXZkM2VBZHN3QUFldHM0WWpCUDY1VlJST3VaZWNYK0JsekZHeG55RW5QM2JGc2JQNjlxR3hwMnNGSTl5dGhzdEtNWjJ6TVQwTzgyZmZTZTZNL1ZNNlJUVXVkTHE5YTMvQy9xYWl3bHBnSmluNERLZjFVWkJoWjBEYVRiVGdhYjRmT21Yb05SeUsrWFU3S2RaSEtBYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62daf43c-c59e-4275-9065-128177fb", "record_id": "flaws_cloudtrail:0000019:62daf43c-c59e-4275-9065-128177fb", "row_index": 19, "timestamp": "2019-06-13T10:25:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62daf43c-c59e-4275-9065-128177fb", "eventTime": "2019-06-13T10:25:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGYmpudWk0SkhqUE5PVU1YZ3hQN1NBaDNJb1ZueE5OUi95ZUd1b0ozZG9xeGN1ZHBWMllBYm9YdTZ1SjdWTDRZQXJQWDl4ckZiSmtZSFZNdmgwVk9hKzhGaWNicld5OGRzdlE1T2lYK210SlJFY3hTRkhBMTBWV2NXeU9sejVXMGFvTzVBWkh1ZHRQZFpPK1BQMTJVVUJRWll1dXpKTiszVVpQL1ZnYUNCQ3lVQ0QwMWFSQTIvZytQTFgvRVM2RXRYdGRiendVRGtDRjdhNUd6bHRNaGNoWkF5eUhQSktBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62daf43c-c59e-4275-9065-128177fb", "record_id": "flaws_cloudtrail:0000020:62daf43c-c59e-4275-9065-128177fb", "row_index": 20, "timestamp": "2019-06-13T10:25:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62daf43c-c59e-4275-9065-128177fb", "eventTime": "2019-06-13T10:25:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGYmpudWk0SkhqUE5PVU1YZ3hQN1NBaDNJb1ZueE5OUi95ZUd1b0ozZG9xeGN1ZHBWMllBYm9YdTZ1SjdWTDRZQXJQWDl4ckZiSmtZSFZNdmgwVk9hKzhGaWNicld5OGRzdlE1T2lYK210SlJFY3hTRkhBMTBWV2NXeU9sejVXMGFvTzVBWkh1ZHRQZFpPK1BQMTJVVUJRWll1dXpKTiszVVpQL1ZnYUNCQ3lVQ0QwMWFSQTIvZytQTFgvRVM2RXRYdGRiendVRGtDRjdhNUd6bHRNaGNoWkF5eUhQSktBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c3a26f1-b434-4d15-8556-9e26836ae7", "record_id": "flaws_cloudtrail:0000021:7c3a26f1-b434-4d15-8556-9e26836ae7", "row_index": 21, "timestamp": "2019-06-13T10:25:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c3a26f1-b434-4d15-8556-9e26836ae7", "eventTime": "2019-06-13T10:25:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOckt2cUNKNnZCdFhVc2Y3K2p4a2dSQXlDcDlZaThUd1VCUVQrZ0ZNQnExanBBeFRaT3dvVURFVUxxcnp5c1hpeHZLUGcxL1JieVBxcnJyRk4ySUF5ZURBTy9yUE5xN0JRSzlSMzZvSWQzS3RnWGVaU2ptZDM4S3kwcmp5SDFzVFpPVXl0S01SMTBQc1NlQ3ZHWEVEN1JGODBTSmtjWkliVWpZdzI5N0t5Q3cxTTBqOEJUS3c5WWVTODE4L2tocz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c68556-b827-4343-9dd4-cdf3db99d2f7", "record_id": "flaws_cloudtrail:0000022:c8c68556-b827-4343-9dd4-cdf3db99d2f7", "row_index": 22, "timestamp": "2019-06-13T10:25:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c68556-b827-4343-9dd4-cdf3db99d2f7", "eventTime": "2019-06-13T10:25:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4YVZiaTZZTktEWTJOVVRHbTNVYk5uc2k3VjRLZ09zOWFCNFpCUjlValV0eWZDWTZVMEVVRjJmc0FwcENVaWNJU202VDVpU0xPTlhWZStYdmNzM3dsOEZqRi8wR29vNUt6bVEwamNFQlg0MEZJeE5WT1h1ZFp2M0xMR1R4NENGdEk5TUI1dlI2Z2xiQ09YUHdaY3gxaWFQS0VtMkpsL3E2Rjd1YkoxaGZybFpON0d2d29Pc0FBY2NkN29MczlZeElNaTRYcWw4MHU3ZEFhclQrWjNiazBiS0lONmRWMXR3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c3a26f1-b434-4d15-8556-9e26836ae7", "record_id": "flaws_cloudtrail:0000023:7c3a26f1-b434-4d15-8556-9e26836ae7", "row_index": 23, "timestamp": "2019-06-13T10:25:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c3a26f1-b434-4d15-8556-9e26836ae7", "eventTime": "2019-06-13T10:25:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOckt2cUNKNnZCdFhVc2Y3K2p4a2dSQXlDcDlZaThUd1VCUVQrZ0ZNQnExanBBeFRaT3dvVURFVUxxcnp5c1hpeHZLUGcxL1JieVBxcnJyRk4ySUF5ZURBTy9yUE5xN0JRSzlSMzZvSWQzS3RnWGVaU2ptZDM4S3kwcmp5SDFzVFpPVXl0S01SMTBQc1NlQ3ZHWEVEN1JGODBTSmtjWkliVWpZdzI5N0t5Q3cxTTBqOEJUS3c5WWVTODE4L2tocz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c68556-b827-4343-9dd4-cdf3db99d2f7", "record_id": "flaws_cloudtrail:0000024:c8c68556-b827-4343-9dd4-cdf3db99d2f7", "row_index": 24, "timestamp": "2019-06-13T10:25:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c68556-b827-4343-9dd4-cdf3db99d2f7", "eventTime": "2019-06-13T10:25:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4YVZiaTZZTktEWTJOVVRHbTNVYk5uc2k3VjRLZ09zOWFCNFpCUjlValV0eWZDWTZVMEVVRjJmc0FwcENVaWNJU202VDVpU0xPTlhWZStYdmNzM3dsOEZqRi8wR29vNUt6bVEwamNFQlg0MEZJeE5WT1h1ZFp2M0xMR1R4NENGdEk5TUI1dlI2Z2xiQ09YUHdaY3gxaWFQS0VtMkpsL3E2Rjd1YkoxaGZybFpON0d2d29Pc0FBY2NkN29MczlZeElNaTRYcWw4MHU3ZEFhclQrWjNiazBiS0lONmRWMXR3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "888b3c18-c896-4fbe-85d4-e021cb0a204b", "record_id": "flaws_cloudtrail:0000025:888b3c18-c896-4fbe-85d4-e021cb0a204b", "row_index": 25, "timestamp": "2019-06-13T10:25:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "888b3c18-c896-4fbe-85d4-e021cb0a204b", "eventTime": "2019-06-13T10:25:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISFZoS3IxWGQvMXY1MWFWOUpJaDZJTE5vT0FVUnluN2N2WU9DZElMQWMwcUZ4WmtNODFSNW1VbVNKTy92bXg0RHJuSEZrenlHKzNwY2VCb1VHZUxOUjNsanI4ZklDV1RkMHZyM1pwQXhMSzVZS21FeWcralMzeUJFdHlDVFZtZi94RGd0Q2ZaMlFEVzB0WEMxQW9kRVk5bXZsY1UwOWdvMko4K2htYmwvVGlRdkdLUkpxd29DMkVVMEp1VWJxbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "888b3c18-c896-4fbe-85d4-e021cb0a204b", "record_id": "flaws_cloudtrail:0000026:888b3c18-c896-4fbe-85d4-e021cb0a204b", "row_index": 26, "timestamp": "2019-06-13T10:25:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "888b3c18-c896-4fbe-85d4-e021cb0a204b", "eventTime": "2019-06-13T10:25:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISFZoS3IxWGQvMXY1MWFWOUpJaDZJTE5vT0FVUnluN2N2WU9DZElMQWMwcUZ4WmtNODFSNW1VbVNKTy92bXg0RHJuSEZrenlHKzNwY2VCb1VHZUxOUjNsanI4ZklDV1RkMHZyM1pwQXhMSzVZS21FeWcralMzeUJFdHlDVFZtZi94RGd0Q2ZaMlFEVzB0WEMxQW9kRVk5bXZsY1UwOWdvMko4K2htYmwvVGlRdkdLUkpxd29DMkVVMEp1VWJxbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce1036e3-27a9-4f18-aee1-a4bbe69187b", "record_id": "flaws_cloudtrail:0000027:ce1036e3-27a9-4f18-aee1-a4bbe69187b", "row_index": 27, "timestamp": "2019-06-13T10:25:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1114, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce1036e3-27a9-4f18-aee1-a4bbe69187b", "eventTime": "2019-06-13T10:25:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLdmZFc3g2MklqTzduS3VrOG9Nb1pqTEgveXVlcnJvanVpR2kvUnB0aGY2ZXFzdytMYU1Ca2NtaVR3dE95NkFacGRTYitBTVB6bi9nQWpsUWN0b21aNWJPZENGYjIyZVhBbXQ0M05mVTlUWmgwb1IyVkJ0alhrbjNtYXd5M2tYaVdGMGthYzVRdXo2YkZlNHgrWHhob0FPY1p4alNRKzVwaE81MGdMWTAvZUlkOVJPdlVzMnJvQmw2NXAzVEw5T1A1cXdPMGZxT2djWkw3TWRJdDlTenhMMjhDWk5wZXZ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce1036e3-27a9-4f18-aee1-a4bbe69187b", "record_id": "flaws_cloudtrail:0000028:ce1036e3-27a9-4f18-aee1-a4bbe69187b", "row_index": 28, "timestamp": "2019-06-13T10:25:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1114, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce1036e3-27a9-4f18-aee1-a4bbe69187b", "eventTime": "2019-06-13T10:25:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLdmZFc3g2MklqTzduS3VrOG9Nb1pqTEgveXVlcnJvanVpR2kvUnB0aGY2ZXFzdytMYU1Ca2NtaVR3dE95NkFacGRTYitBTVB6bi9nQWpsUWN0b21aNWJPZENGYjIyZVhBbXQ0M05mVTlUWmgwb1IyVkJ0alhrbjNtYXd5M2tYaVdGMGthYzVRdXo2YkZlNHgrWHhob0FPY1p4alNRKzVwaE81MGdMWTAvZUlkOVJPdlVzMnJvQmw2NXAzVEw5T1A1cXdPMGZxT2djWkw3TWRJdDlTenhMMjhDWk5wZXZ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef999ba7-2f02-4279-9a9d-3a6defbee375", "record_id": "flaws_cloudtrail:0000029:ef999ba7-2f02-4279-9a9d-3a6defbee375", "row_index": 29, "timestamp": "2019-06-13T10:25:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef999ba7-2f02-4279-9a9d-3a6defbee375", "eventTime": "2019-06-13T10:25:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYkIwaXhySVlLMmtGVjJuSHBLUE8vbGgyaHpOOE41Qm5GRFR0clFNeWZkeW9VSmVMS3BoRlBpSVdNSTVXa0t4cm51WXpHckF2c0Q3NGVHSDkzdFlHWlZWb0dIamFRWDFEYlhJUlBuTldDcHU5ZXN3OGs3MkZBbURzMldVaEZqZ0QzUmtVbmJsTlJyZTB5K2ZZOUlsU0RPNHQ5eVIzNFJuL1ZSNUtIcDVIV05VTXpNQ1d6a2ZxQVZvOFhpRE1idz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef999ba7-2f02-4279-9a9d-3a6defbee375", "record_id": "flaws_cloudtrail:0000030:ef999ba7-2f02-4279-9a9d-3a6defbee375", "row_index": 30, "timestamp": "2019-06-13T10:25:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef999ba7-2f02-4279-9a9d-3a6defbee375", "eventTime": "2019-06-13T10:25:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYkIwaXhySVlLMmtGVjJuSHBLUE8vbGgyaHpOOE41Qm5GRFR0clFNeWZkeW9VSmVMS3BoRlBpSVdNSTVXa0t4cm51WXpHckF2c0Q3NGVHSDkzdFlHWlZWb0dIamFRWDFEYlhJUlBuTldDcHU5ZXN3OGs3MkZBbURzMldVaEZqZ0QzUmtVbmJsTlJyZTB5K2ZZOUlsU0RPNHQ5eVIzNFJuL1ZSNUtIcDVIV05VTXpNQ1d6a2ZxQVZvOFhpRE1idz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d57aa4-be7d-4bea-821c-87954bd4ec23", "record_id": "flaws_cloudtrail:0000031:37d57aa4-be7d-4bea-821c-87954bd4ec23", "row_index": 31, "timestamp": "2019-06-13T10:25:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d57aa4-be7d-4bea-821c-87954bd4ec23", "eventTime": "2019-06-13T10:25:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmVnoyRm03ZkVHMmlxaVdEVVAwckkySUx1U2NBalJ1OFJkTmZ0Mms1OU1OV3BxajRROWtrV2kzSUJjMUNYSnZzY2N2QU9hQ0VUUFRqUlB4dUNPK3BrcklURXFMMDBoSENrZE5DdSttYk5xYXVoVlBYeDk1YWkvWGhxQXlsWlhxL0lRNlhsZXQ4SWF6bDBWc2UrUmZiWjQ2UVUrTXRvbWRRemVObklzdXplc05wenlRRjJBOWk0eWtycTVIMGZFbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91d736b-00e6-4aa3-8a8e-aee238a7d5ab", "record_id": "flaws_cloudtrail:0000032:b91d736b-00e6-4aa3-8a8e-aee238a7d5ab", "row_index": 32, "timestamp": "2019-06-13T10:25:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91d736b-00e6-4aa3-8a8e-aee238a7d5ab", "eventTime": "2019-06-13T10:25:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiZzZrOVdOSitYb2RGSVVheE9jTzViakl6dENoNlRCYmZnUGRHQTAvN3h4eHlQNS9GV2FPdVMwTURrLzZjRXhaT0xBeUMyRmhoVlowaUpMUkx2Sk1jbWRMTzJLL2NUdlhtbkN3dDA1aktrUGNpamZsNlpjRmNuaDZBMkppbDYzeGFPUlNXQmFkK2t4NjJGQkFSRkg3Qm54VmVNQlQzMDJZTmdwMW4xV2ZqYjdkQjVKT2pYYXVsTHdudVlrRzc1SS9wYUpaa1RxSGhmQ3hCRHk0Wi9TNGNaWEpucDNWbkRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d57aa4-be7d-4bea-821c-87954bd4ec23", "record_id": "flaws_cloudtrail:0000033:37d57aa4-be7d-4bea-821c-87954bd4ec23", "row_index": 33, "timestamp": "2019-06-13T10:25:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d57aa4-be7d-4bea-821c-87954bd4ec23", "eventTime": "2019-06-13T10:25:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmVnoyRm03ZkVHMmlxaVdEVVAwckkySUx1U2NBalJ1OFJkTmZ0Mms1OU1OV3BxajRROWtrV2kzSUJjMUNYSnZzY2N2QU9hQ0VUUFRqUlB4dUNPK3BrcklURXFMMDBoSENrZE5DdSttYk5xYXVoVlBYeDk1YWkvWGhxQXlsWlhxL0lRNlhsZXQ4SWF6bDBWc2UrUmZiWjQ2UVUrTXRvbWRRemVObklzdXplc05wenlRRjJBOWk0eWtycTVIMGZFbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91d736b-00e6-4aa3-8a8e-aee238a7d5ab", "record_id": "flaws_cloudtrail:0000034:b91d736b-00e6-4aa3-8a8e-aee238a7d5ab", "row_index": 34, "timestamp": "2019-06-13T10:25:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91d736b-00e6-4aa3-8a8e-aee238a7d5ab", "eventTime": "2019-06-13T10:25:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiZzZrOVdOSitYb2RGSVVheE9jTzViakl6dENoNlRCYmZnUGRHQTAvN3h4eHlQNS9GV2FPdVMwTURrLzZjRXhaT0xBeUMyRmhoVlowaUpMUkx2Sk1jbWRMTzJLL2NUdlhtbkN3dDA1aktrUGNpamZsNlpjRmNuaDZBMkppbDYzeGFPUlNXQmFkK2t4NjJGQkFSRkg3Qm54VmVNQlQzMDJZTmdwMW4xV2ZqYjdkQjVKT2pYYXVsTHdudVlrRzc1SS9wYUpaa1RxSGhmQ3hCRHk0Wi9TNGNaWEpucDNWbkRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c1933d6-3b42-4f5c-8c1f-8708472e99e7", "record_id": "flaws_cloudtrail:0000035:6c1933d6-3b42-4f5c-8c1f-8708472e99e7", "row_index": 35, "timestamp": "2019-06-13T10:25:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c1933d6-3b42-4f5c-8c1f-8708472e99e7", "eventTime": "2019-06-13T10:25:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKNzBQaHMyQ3dxOHJheXE1RVIzUkFFazdCNGt5emZtc2RyS1RuM2V3M0ZNKzI2TkFTbTY1OXJmSjZ5UXBFcitXeFdpZ0F3MmlCdXZaL0NQSUZKR2pPK2g0UHh3VjRjZTdPdndUdnQ4T0JacFpPZmt2ZTNBcXN0dHE1QVJSMUtWZG1CQVJPS3RtQk5vSlpzUURvQTZIZTV3WWxNSEJMam94b3E4ak5yakw1cW12N1VKMnVWS0VLQ1JrMHVsbnEzYVR2QUZLT0V0Qjdic2F4QjZPNXgwTmF4SmsvTC9ta1RvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c1933d6-3b42-4f5c-8c1f-8708472e99e7", "record_id": "flaws_cloudtrail:0000036:6c1933d6-3b42-4f5c-8c1f-8708472e99e7", "row_index": 36, "timestamp": "2019-06-13T10:25:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c1933d6-3b42-4f5c-8c1f-8708472e99e7", "eventTime": "2019-06-13T10:25:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKNzBQaHMyQ3dxOHJheXE1RVIzUkFFazdCNGt5emZtc2RyS1RuM2V3M0ZNKzI2TkFTbTY1OXJmSjZ5UXBFcitXeFdpZ0F3MmlCdXZaL0NQSUZKR2pPK2g0UHh3VjRjZTdPdndUdnQ4T0JacFpPZmt2ZTNBcXN0dHE1QVJSMUtWZG1CQVJPS3RtQk5vSlpzUURvQTZIZTV3WWxNSEJMam94b3E4ak5yakw1cW12N1VKMnVWS0VLQ1JrMHVsbnEzYVR2QUZLT0V0Qjdic2F4QjZPNXgwTmF4SmsvTC9ta1RvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734089b62-20fd-43e0-82f5-a6daf0e35be1", "record_id": "flaws_cloudtrail:0000037:734089b62-20fd-43e0-82f5-a6daf0e35be1", "row_index": 37, "timestamp": "2019-06-13T10:25:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734089b62-20fd-43e0-82f5-a6daf0e35be1", "eventTime": "2019-06-13T10:25:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEaWo4bTR6c1IzSW8wd0hvcVhyWlBSV3lscU5rQjBramUyTnZrdzFVWXFGSFo1VXNMdU9GRjAveU5JY2IrWS9rVkIzbHhrL2I2bVFLak52TE80bEJmTWV2TkRoZjlHbnFNTUdUYXduT0krUThiY0ZMbm1LaXFIVDNBUmI4NHZFcEozK0VNd1cycWNHRXMxRlZxcFBJVkNHS3VwWU00Nm9Memg2WWtJQkF2bGtPY0VHdEREOThnUG1vWm04dFkyOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734089b62-20fd-43e0-82f5-a6daf0e35be1", "record_id": "flaws_cloudtrail:0000038:734089b62-20fd-43e0-82f5-a6daf0e35be1", "row_index": 38, "timestamp": "2019-06-13T10:25:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734089b62-20fd-43e0-82f5-a6daf0e35be1", "eventTime": "2019-06-13T10:25:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEaWo4bTR6c1IzSW8wd0hvcVhyWlBSV3lscU5rQjBramUyTnZrdzFVWXFGSFo1VXNMdU9GRjAveU5JY2IrWS9rVkIzbHhrL2I2bVFLak52TE80bEJmTWV2TkRoZjlHbnFNTUdUYXduT0krUThiY0ZMbm1LaXFIVDNBUmI4NHZFcEozK0VNd1cycWNHRXMxRlZxcFBJVkNHS3VwWU00Nm9Memg2WWtJQkF2bGtPY0VHdEREOThnUG1vWm04dFkyOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee3e23cb-ebc0-499a-a3ab-ec9c817048de", "record_id": "flaws_cloudtrail:0000039:ee3e23cb-ebc0-499a-a3ab-ec9c817048de", "row_index": 39, "timestamp": "2019-06-13T10:26:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee3e23cb-ebc0-499a-a3ab-ec9c817048de", "eventTime": "2019-06-13T10:26:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-2a0b3b47"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee3e23cb-ebc0-499a-a3ab-ec9c817048de", "record_id": "flaws_cloudtrail:0000040:ee3e23cb-ebc0-499a-a3ab-ec9c817048de", "row_index": 40, "timestamp": "2019-06-13T10:26:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee3e23cb-ebc0-499a-a3ab-ec9c817048de", "eventTime": "2019-06-13T10:26:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-2a0b3b47"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0ba81c-86f8-44ac-98d1-91147c81df3", "record_id": "flaws_cloudtrail:0000041:ea0ba81c-86f8-44ac-98d1-91147c81df3", "row_index": 41, "timestamp": "2019-06-13T10:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0ba81c-86f8-44ac-98d1-91147c81df3", "eventTime": "2019-06-13T10:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABOU4XNSA6F8GDVU4", "expiration": "Jun 13, 2019 4:30:37 PM", "sessionToken": "AgoJb3JpZ2luX2VjEKv//////////wEaCXVzLXdlc3QtMiJIMEYCIQD/ZtxRDmE9HxskuJ1mmfAIR48gCgMYU7C+EKFza2QgHAIhAJETq9AarnZe+Tiwv4VuwMD2OpOSmHwIKgsDCieAFHxWKuMDCNT//////////wEQABoMOTc1NDI2MjYyMDI5Igwd1CXx/jdNMbTSifAqtwN+DEQQwy38ovewjanBgxJRbb+/Dc0GTbci4HCOgLB5fvE76EvhSdVhGzWvnkrRPsXO5P3JjR7G4CKPhWb2y4DVeldJgWc0lvsPKfYqcTVdn6bExYwMkG+urA4gt9Md1eTlsltqEH185LC4X2sXgrSx0yX8CuZjDA4KMDOF2jgB+RXHSkCtPDoRatx7vMWHoTg9GcjTHbT+kTFbhBdOjg0umx2xULPBzm1CJVD3FW8QwqwczqQZZoaY0/qmGi46i5OFnrMcjda3DTRn4ISlUWImh3+HsJFhYfF9reEDSTvjXGLvjQBuww/XyNNPTHA5bslwo+YSsxrwToSSVDP+648OhtkqLqBTCR3OAjJdOFL8/WDyC9tzSVQIFHeesAABc3E3OJb7YKMEVjXdZqeWkAf6x+/lmy9IRWLWD6ifMIwbj5zWlyNVyqJeni2b2AndY2H38T2VC3AQVpyCbw4dyy5ku+tLcAoedEZWZyHWI7q/wm/re738pitwho4mkMr7vq8fZfPXiEvU9Y47OwPjOQhu0TLRgnWFP9N8ThWygeaajHz86Go6Fx1pycfKlZ33Ik8ZN+9YE8bcMOPJiOgFOrMB4TdiWYm9NqLClQVjYa5lorm+PVzwqaXkmTeUcvzG540tiayBWUn62dl0jhd3tK11SvNhPdVnxTuhvxOjtSU9VckDY88dFah6+KFlL258xbbkvNj5HYxxGtGwUQ3ktxRJwq2jfg2ZUbZr8RbtZa2rrUWA/EiLToxHqZLoMNyMZCuDOkD+tOhYSfQ3mEq3ws9yIyH8Ltt/CVVrd3LcHEqFCZ/MuA+i05jv7NUgMoETmdlyOQE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0ba81c-86f8-44ac-98d1-91147c81df3", "record_id": "flaws_cloudtrail:0000042:ea0ba81c-86f8-44ac-98d1-91147c81df3", "row_index": 42, "timestamp": "2019-06-13T10:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0ba81c-86f8-44ac-98d1-91147c81df3", "eventTime": "2019-06-13T10:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABOU4XNSA6F8GDVU4", "expiration": "Jun 13, 2019 4:30:37 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfcc2680-b47b-4dfd-a14a-b7f6729944cd", "record_id": "flaws_cloudtrail:0000043:dfcc2680-b47b-4dfd-a14a-b7f6729944cd", "row_index": 43, "timestamp": "2019-06-13T10:55:18Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfcc2680-b47b-4dfd-a14a-b7f6729944cd", "eventTime": "2019-06-13T10:55:18Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidVolume.NotFound", "errorMessage": "The volume 'vol-05c22e75' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-05c22e75"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfcc2680-b47b-4dfd-a14a-b7f6729944cd", "record_id": "flaws_cloudtrail:0000044:dfcc2680-b47b-4dfd-a14a-b7f6729944cd", "row_index": 44, "timestamp": "2019-06-13T10:55:18Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfcc2680-b47b-4dfd-a14a-b7f6729944cd", "eventTime": "2019-06-13T10:55:18Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidVolume.NotFound", "errorMessage": "The volume 'vol-05c22e75' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-05c22e75"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5274a153-acbd-4a61-a21d-b61b1d2fa08f", "record_id": "flaws_cloudtrail:0000045:5274a153-acbd-4a61-a21d-b61b1d2fa08f", "row_index": 45, "timestamp": "2019-06-13T10:59:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5274a153-acbd-4a61-a21d-b61b1d2fa08f", "eventTime": "2019-06-13T10:59:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5274a153-acbd-4a61-a21d-b61b1d2fa08f", "record_id": "flaws_cloudtrail:0000046:5274a153-acbd-4a61-a21d-b61b1d2fa08f", "row_index": 46, "timestamp": "2019-06-13T10:59:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5274a153-acbd-4a61-a21d-b61b1d2fa08f", "eventTime": "2019-06-13T10:59:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3c7e2f4-7498-44fc-a442-07621ecdc12", "record_id": "flaws_cloudtrail:0000047:f3c7e2f4-7498-44fc-a442-07621ecdc12", "row_index": 47, "timestamp": "2019-06-13T11:07:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3c7e2f4-7498-44fc-a442-07621ecdc12", "eventTime": "2019-06-13T11:07:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "218902826178"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3c7e2f4-7498-44fc-a442-07621ecdc12", "record_id": "flaws_cloudtrail:0000048:f3c7e2f4-7498-44fc-a442-07621ecdc12", "row_index": 48, "timestamp": "2019-06-13T11:07:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3c7e2f4-7498-44fc-a442-07621ecdc12", "eventTime": "2019-06-13T11:07:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "218902826178"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2220c0df-5a77-4a61-8ef8-53a19ff9966d", "record_id": "flaws_cloudtrail:0000049:2220c0df-5a77-4a61-8ef8-53a19ff9966d", "row_index": 49, "timestamp": "2019-06-13T11:10:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2220c0df-5a77-4a61-8ef8-53a19ff9966d", "eventTime": "2019-06-13T11:10:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2220c0df-5a77-4a61-8ef8-53a19ff9966d", "record_id": "flaws_cloudtrail:0000050:2220c0df-5a77-4a61-8ef8-53a19ff9966d", "row_index": 50, "timestamp": "2019-06-13T11:10:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2220c0df-5a77-4a61-8ef8-53a19ff9966d", "eventTime": "2019-06-13T11:10:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e08d2c-d904-468d-8f82-6e98ffcf3fc6", "record_id": "flaws_cloudtrail:0000051:15e08d2c-d904-468d-8f82-6e98ffcf3fc6", "row_index": 51, "timestamp": "2019-06-13T11:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e08d2c-d904-468d-8f82-6e98ffcf3fc6", "eventTime": "2019-06-13T11:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASVZEJUYEHKTULBCX", "expiration": "Jun 13, 2019 5:51:29 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e08d2c-d904-468d-8f82-6e98ffcf3fc6", "record_id": "flaws_cloudtrail:0000052:15e08d2c-d904-468d-8f82-6e98ffcf3fc6", "row_index": 52, "timestamp": "2019-06-13T11:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e08d2c-d904-468d-8f82-6e98ffcf3fc6", "eventTime": "2019-06-13T11:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASVZEJUYEHKTULBCX", "expiration": "Jun 13, 2019 5:51:29 PM", "sessionToken": "AgoJb3JpZ2luX2VjEKz//////////wEaCXVzLXdlc3QtMiJIMEYCIQCc8BG/fuorEHHlfPO91rL5eZDJUDF9J3Azy1P4RhY04wIhAIoI+P0j167Sf7jBrq+Ct/gn2IN6Rycv6Cmcb47NZKI1KuMDCNX//////////wEQABoMOTc1NDI2MjYyMDI5Igxa1MzjcGoKrnE6RdMqtwNSZbGHUO+0nGJwMVEFNrKemSNB8J4b4P/N9OFWeaQb4XRvgW+IrYXClxbjmoqbSIcnMpA/3h+FO+Sj4YRQTbm7l97nh1TwhwHD4k/l2fBgBSs2EdVQ/VZyG1utITduhQ8J7gvx48FOJENrpKQ31gZ3lcXlmXYEYMzphx3dnu7RcW4fH8JuGIqSQAjVWRY/4OVwAXHsHvk+egwgdh7GY7FatR9mD11qIQrCtN9I02d78N1WRtiKH1HU/D4gO7mfYro5qoVPc19e20jkski+/xGr7zETElq+Gsp8JRe0oh4ALm9ax6LL3u/xUzP6OyT8a028xj0m+Ux+PHK2YHE/DGynYvj0jJoEzWoYobzq+QC3b7vRBwM+nQoAzg8QW8NtSn1uHOO1vPXqZOjSLWbiYtzGROWnU6MppW3VRH8eQ34wlSBdAHVlpWSGU1J2d6zUNdfLu5I+Sh7EtDVsQGJ2IV1NQDeMscJhDFLnxZbE6ydSicvMMSmSZRkNxkSgbBVCwIah0KHOt9HHV/y0roYz5T0QfrS+AC43gVWx6MiIa9AuXz41HHXQx2uY53SdVDy7YL8N+VgBA5pwMPPliOgFOrMBb2SmqdPJ5atm/CztwuQ+f64Vg+otB3uWEysP9oKQYnwO6vh+8sDf/WeCWdB9wHs46rsrW5gdJmE910cH9oktmxE2IARS3NRcV+BDzugi7BUOe+Kvet14FwBEpid8WezzOLDYKB0AiI+O1OusZkPxTyFsIr6hM+i0FYfohzk/1NgfiX8ABhGKSzJ/cDCbi8t5GyjhjWgIP6+5N1HLkx7AWbh8No/PWQa528/FRB0Y85ICOyo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bb8968b-9388-4fd7-8ba7-a91fa71b5e66", "record_id": "flaws_cloudtrail:0000053:8bb8968b-9388-4fd7-8ba7-a91fa71b5e66", "row_index": 53, "timestamp": "2019-06-13T11:34:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bb8968b-9388-4fd7-8ba7-a91fa71b5e66", "eventTime": "2019-06-13T11:34:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bb8968b-9388-4fd7-8ba7-a91fa71b5e66", "record_id": "flaws_cloudtrail:0000054:8bb8968b-9388-4fd7-8ba7-a91fa71b5e66", "row_index": 54, "timestamp": "2019-06-13T11:34:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bb8968b-9388-4fd7-8ba7-a91fa71b5e66", "eventTime": "2019-06-13T11:34:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "792da91b-cd63-4b65-8a48-0e3a904489f9", "record_id": "flaws_cloudtrail:0000055:792da91b-cd63-4b65-8a48-0e3a904489f9", "row_index": 55, "timestamp": "2019-06-13T11:35:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "792da91b-cd63-4b65-8a48-0e3a904489f9", "eventTime": "2019-06-13T11:35:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "792da91b-cd63-4b65-8a48-0e3a904489f9", "record_id": "flaws_cloudtrail:0000056:792da91b-cd63-4b65-8a48-0e3a904489f9", "row_index": 56, "timestamp": "2019-06-13T11:35:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "792da91b-cd63-4b65-8a48-0e3a904489f9", "eventTime": "2019-06-13T11:35:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2217f915-3cc6-4d04-8509-61290be69c45", "record_id": "flaws_cloudtrail:0000057:2217f915-3cc6-4d04-8509-61290be69c45", "row_index": 57, "timestamp": "2019-06-13T12:15:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2217f915-3cc6-4d04-8509-61290be69c45", "eventTime": "2019-06-13T12:15:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2217f915-3cc6-4d04-8509-61290be69c45", "record_id": "flaws_cloudtrail:0000058:2217f915-3cc6-4d04-8509-61290be69c45", "row_index": 58, "timestamp": "2019-06-13T12:15:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2217f915-3cc6-4d04-8509-61290be69c45", "eventTime": "2019-06-13T12:15:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c61aa041-8098-4b39-ae11-d55dab228aef", "record_id": "flaws_cloudtrail:0000059:c61aa041-8098-4b39-ae11-d55dab228aef", "row_index": 59, "timestamp": "2019-06-13T12:23:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIASVZEJUYEHKTULBCX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1124, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c61aa041-8098-4b39-ae11-d55dab228aef", "eventTime": "2019-06-13T12:23:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIASVZEJUYEHKTULBCX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T11:26:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c61aa041-8098-4b39-ae11-d55dab228aef", "record_id": "flaws_cloudtrail:0000060:c61aa041-8098-4b39-ae11-d55dab228aef", "row_index": 60, "timestamp": "2019-06-13T12:23:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIASVZEJUYEHKTULBCX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1124, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c61aa041-8098-4b39-ae11-d55dab228aef", "eventTime": "2019-06-13T12:23:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIASVZEJUYEHKTULBCX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T11:26:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17d7179-6681-44ac-91d9-7dcf58d4dd2b", "record_id": "flaws_cloudtrail:0000061:d17d7179-6681-44ac-91d9-7dcf58d4dd2b", "row_index": 61, "timestamp": "2019-06-13T12:26:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17d7179-6681-44ac-91d9-7dcf58d4dd2b", "eventTime": "2019-06-13T12:26:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFIDMTJQT9TZOX7EG", "expiration": "Jun 13, 2019 1:26:30 PM", "sessionToken": "AgoGb3JpZ2luEAAaCXVzLXdlc3QtMiKAAnf/uMau8k1DHPmIKS2OIs0V0K7L96o0rC2YzMy5Z6YAc74ly58VkFUQq4h2E7cm0PFEraooVNTjhUeDcE8bvmDrKMBQe4bpthTH3luovtRJmRXOAFhbTCHHaz6BD+QikF3vW6c/YDbDT+HUPXq197PXS8ykiMMs1Vq360ndsybHMarTTyBEp8PfSqMrW2uxJ0qALZTNLIR/A0x9BgkAQbjI/Z3QFOcB81KN8spVThcOITi13xFmTw1qFDw4FhG4wN5oO1puCr+nws3pybjSJ/ZXj/p4r9F5liD86GyWWoyfQuUAD5WyJHab0SzgNerjZpqorLRURL/bkSKki18p7G8q8QII1v//////////ARAAGgw5NzU0MjYyNjIwMjkiDEn7uWtaYR6UHvl+cSrFAiPxWWBg79HxxthIMAx7cwn6OW4+PsYsgzFy7YchWvjhedVsVFkhEzO2sd1Hpp72c9KC8hcxKe4jvUrsi4lQhqq4oTYTdcGmdF7onT4AjVl2fpK+gBGk+1xpm29XtSNyHUAa/gGivjWanrHE7dOHUGnSxVX37lhkuhTleXwv9YXQHs8fkUVgKAAmp7DzpE+kKQIFSWXd2vq0iLcwWEPmhxtPwDUeKfiTIh/etdnXrurQe05O8DdJfwDWOT35VJd6nbh29uTZU4yOj1s52trvWamMv6ekVBwZTWbNnE6tNkFNsPzM8A8UOoqUQxpl4b81hj9ifVTruv/hzj/pphmcvHyJVVdTkXXTts5PQ6qRC4FJw0uhzdkLQILbK5B0QSAj76nh7EHhdOtS+xbpWHY5OMI8WPxCi5M/I6DgPY/l98KGbkn2fx4w9oGJ6AU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17d7179-6681-44ac-91d9-7dcf58d4dd2b", "record_id": "flaws_cloudtrail:0000062:d17d7179-6681-44ac-91d9-7dcf58d4dd2b", "row_index": 62, "timestamp": "2019-06-13T12:26:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17d7179-6681-44ac-91d9-7dcf58d4dd2b", "eventTime": "2019-06-13T12:26:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFIDMTJQT9TZOX7EG", "expiration": "Jun 13, 2019 1:26:30 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a677a5c-0028-4817-99bc-e0e7b194ff2c", "record_id": "flaws_cloudtrail:0000063:9a677a5c-0028-4817-99bc-e0e7b194ff2c", "row_index": 63, "timestamp": "2019-06-13T12:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a677a5c-0028-4817-99bc-e0e7b194ff2c", "eventTime": "2019-06-13T12:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACKSGDESM1N8JYY2M", "expiration": "Jun 13, 2019 6:40:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a677a5c-0028-4817-99bc-e0e7b194ff2c", "record_id": "flaws_cloudtrail:0000064:9a677a5c-0028-4817-99bc-e0e7b194ff2c", "row_index": 64, "timestamp": "2019-06-13T12:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a677a5c-0028-4817-99bc-e0e7b194ff2c", "eventTime": "2019-06-13T12:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACKSGDESM1N8JYY2M", "expiration": "Jun 13, 2019 6:40:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b824888e-03e0-4116-8272-dbb0ca8dd1ea", "record_id": "flaws_cloudtrail:0000065:9b824888e-03e0-4116-8272-dbb0ca8dd1ea", "row_index": 65, "timestamp": "2019-06-13T12:27:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b824888e-03e0-4116-8272-dbb0ca8dd1ea", "eventTime": "2019-06-13T12:27:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b824888e-03e0-4116-8272-dbb0ca8dd1ea", "record_id": "flaws_cloudtrail:0000066:9b824888e-03e0-4116-8272-dbb0ca8dd1ea", "row_index": 66, "timestamp": "2019-06-13T12:27:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b824888e-03e0-4116-8272-dbb0ca8dd1ea", "eventTime": "2019-06-13T12:27:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c243e70d-0c09-4cdf-957c-798ded6ade13", "record_id": "flaws_cloudtrail:0000067:c243e70d-0c09-4cdf-957c-798ded6ade13", "row_index": 67, "timestamp": "2019-06-13T12:27:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c243e70d-0c09-4cdf-957c-798ded6ade13", "eventTime": "2019-06-13T12:27:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c243e70d-0c09-4cdf-957c-798ded6ade13", "record_id": "flaws_cloudtrail:0000068:c243e70d-0c09-4cdf-957c-798ded6ade13", "row_index": 68, "timestamp": "2019-06-13T12:27:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c243e70d-0c09-4cdf-957c-798ded6ade13", "eventTime": "2019-06-13T12:27:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92e582c6-09d2-424e-8db2-c10d640a4736", "record_id": "flaws_cloudtrail:0000069:92e582c6-09d2-424e-8db2-c10d640a4736", "row_index": 69, "timestamp": "2019-06-13T12:27:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92e582c6-09d2-424e-8db2-c10d640a4736", "eventTime": "2019-06-13T12:27:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92e582c6-09d2-424e-8db2-c10d640a4736", "record_id": "flaws_cloudtrail:0000070:92e582c6-09d2-424e-8db2-c10d640a4736", "row_index": 70, "timestamp": "2019-06-13T12:27:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92e582c6-09d2-424e-8db2-c10d640a4736", "eventTime": "2019-06-13T12:27:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "466e1604-b7ad-4705-b8ac-69f04afcdb30", "record_id": "flaws_cloudtrail:0000071:466e1604-b7ad-4705-b8ac-69f04afcdb30", "row_index": 71, "timestamp": "2019-06-13T12:30:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "466e1604-b7ad-4705-b8ac-69f04afcdb30", "eventTime": "2019-06-13T12:30:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "466e1604-b7ad-4705-b8ac-69f04afcdb30", "record_id": "flaws_cloudtrail:0000072:466e1604-b7ad-4705-b8ac-69f04afcdb30", "row_index": 72, "timestamp": "2019-06-13T12:30:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "466e1604-b7ad-4705-b8ac-69f04afcdb30", "eventTime": "2019-06-13T12:30:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c9d43d2-7959-4cb3-b7ff-cb16c6098d5a", "record_id": "flaws_cloudtrail:0000073:6c9d43d2-7959-4cb3-b7ff-cb16c6098d5a", "row_index": 73, "timestamp": "2019-06-13T12:30:51Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c9d43d2-7959-4cb3-b7ff-cb16c6098d5a", "eventTime": "2019-06-13T12:30:51Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c9d43d2-7959-4cb3-b7ff-cb16c6098d5a", "record_id": "flaws_cloudtrail:0000074:6c9d43d2-7959-4cb3-b7ff-cb16c6098d5a", "row_index": 74, "timestamp": "2019-06-13T12:30:51Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c9d43d2-7959-4cb3-b7ff-cb16c6098d5a", "eventTime": "2019-06-13T12:30:51Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b6db31b-0714-40f8-8149-93004b9c333", "record_id": "flaws_cloudtrail:0000075:2b6db31b-0714-40f8-8149-93004b9c333", "row_index": 75, "timestamp": "2019-06-13T12:32:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b6db31b-0714-40f8-8149-93004b9c333", "eventTime": "2019-06-13T12:32:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b6db31b-0714-40f8-8149-93004b9c333", "record_id": "flaws_cloudtrail:0000076:2b6db31b-0714-40f8-8149-93004b9c333", "row_index": 76, "timestamp": "2019-06-13T12:32:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b6db31b-0714-40f8-8149-93004b9c333", "eventTime": "2019-06-13T12:32:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f7c47f7-9627-4bce-8961-efb716132ae4", "record_id": "flaws_cloudtrail:0000077:0f7c47f7-9627-4bce-8961-efb716132ae4", "row_index": 77, "timestamp": "2019-06-13T12:35:00Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f7c47f7-9627-4bce-8961-efb716132ae4", "eventTime": "2019-06-13T12:35:00Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f7c47f7-9627-4bce-8961-efb716132ae4", "record_id": "flaws_cloudtrail:0000078:0f7c47f7-9627-4bce-8961-efb716132ae4", "row_index": 78, "timestamp": "2019-06-13T12:35:00Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f7c47f7-9627-4bce-8961-efb716132ae4", "eventTime": "2019-06-13T12:35:00Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5921beb-5ee4-458d-844b-c4bfa17b5a3c", "record_id": "flaws_cloudtrail:0000079:d5921beb-5ee4-458d-844b-c4bfa17b5a3c", "row_index": 79, "timestamp": "2019-06-13T12:35:31Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5921beb-5ee4-458d-844b-c4bfa17b5a3c", "eventTime": "2019-06-13T12:35:31Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqApMsTlFw1AYLVN92UlFWEHvs61zKVA4voKwrmuO1k9-i4kVoExxcjrY4oA7U9Bdq37Q8uAa5cIefhfuL-Ye2TDm0LshzMYNHZkx2wBfo4o3APMov82dppVrHkgpQLo050Nias-kVGRtCCOUpJDTBlq_NeX63ZuuOEScDX9g2yUAAD4mcWb0JgftAjVzTc6Ce93ZUaT2sAWXHCezLRpRqoIV5myaKQvF32W2zaJFVkDde6JymXgl4-nJAaLAkmZ9sIrdxOmLiUxZ5sBYL9n3rX3hPwPfOWN9xty7emKAlYm3wH6tiKGN8YNPIzd0QAsdeawKZMqwJfJa_sl-DVIZqKVwiQ7meU0m3dhV8ywp8HnI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17fe2ea-aba9-4ecd-8522-f153a200ce39", "record_id": "flaws_cloudtrail:0000080:d17fe2ea-aba9-4ecd-8522-f153a200ce39", "row_index": 80, "timestamp": "2019-06-13T12:35:31Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17fe2ea-aba9-4ecd-8522-f153a200ce39", "eventTime": "2019-06-13T12:35:31Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5921beb-5ee4-458d-844b-c4bfa17b5a3c", "record_id": "flaws_cloudtrail:0000081:d5921beb-5ee4-458d-844b-c4bfa17b5a3c", "row_index": 81, "timestamp": "2019-06-13T12:35:31Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5921beb-5ee4-458d-844b-c4bfa17b5a3c", "eventTime": "2019-06-13T12:35:31Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqApMsTlFw1AYLVN92UlFWEHvs61zKVA4voKwrmuO1k9-i4kVoExxcjrY4oA7U9Bdq37Q8uAa5cIefhfuL-Ye2TDm0LshzMYNHZkx2wBfo4o3APMov82dppVrHkgpQLo050Nias-kVGRtCCOUpJDTBlq_NeX63ZuuOEScDX9g2yUAAD4mcWb0JgftAjVzTc6Ce93ZUaT2sAWXHCezLRpRqoIV5myaKQvF32W2zaJFVkDde6JymXgl4-nJAaLAkmZ9sIrdxOmLiUxZ5sBYL9n3rX3hPwPfOWN9xty7emKAlYm3wH6tiKGN8YNPIzd0QAsdeawKZMqwJfJa_sl-DVIZqKVwiQ7meU0m3dhV8ywp8HnI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17fe2ea-aba9-4ecd-8522-f153a200ce39", "record_id": "flaws_cloudtrail:0000082:d17fe2ea-aba9-4ecd-8522-f153a200ce39", "row_index": 82, "timestamp": "2019-06-13T12:35:31Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17fe2ea-aba9-4ecd-8522-f153a200ce39", "eventTime": "2019-06-13T12:35:31Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4125e153-f28f-436b-9904-f0df994abc20", "record_id": "flaws_cloudtrail:0000083:4125e153-f28f-436b-9904-f0df994abc20", "row_index": 83, "timestamp": "2019-06-13T12:35:32Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4125e153-f28f-436b-9904-f0df994abc20", "eventTime": "2019-06-13T12:35:32Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqBQIkmvLwYVqrRgfoR0pkJtsDbxZBCil9nqVgwhLqQQoooPs83SWIWPC2SuyVFANi1_SgAdNYx7cxkoyGsCH3hJ64OT4FP0lsFKLPR6eUcekNp95lSDOwTb2MnytI9GVJC1lYivLZ-4LE5FeWhxmoz2WBIzFlvQlVycrth8ZCNkrX6qa--VqtseEYUtCtWeQJtcCWO-tVr7-IHVKr9PGiqsVpieIJr4oHNwQNe5jGY4f7ZXKMC0LyGhkSCRf00OJnvvTuPr7OeUFijGUC-S_0wacGmBKUVvTi14sdC4kLbGWzQwZ3pw-bHHrziSyoth9RFzY6xLPW15gk1phFB355GXndy99X3aYk5Ov284ciaY0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3386f65f-3238-4159-baf5-c4398fd5c0c9", "record_id": "flaws_cloudtrail:0000084:3386f65f-3238-4159-baf5-c4398fd5c0c9", "row_index": 84, "timestamp": "2019-06-13T12:35:32Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3386f65f-3238-4159-baf5-c4398fd5c0c9", "eventTime": "2019-06-13T12:35:32Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqZuJPvVtGv6iFN5ZuI7mliaB1yeb9Gd8zYTXyhnVYFS119gbHw62z3jZqsLfjRT8lQG-yFl7oqEuPrQB5KLDvfIvkUkOX14_qWc0skSR9bItAUHkv9RHqAT7MHT6U9mb3wuPownTyKvHAZqOxrDHfXfQwU5FNERth4O93jN2rc0zQCbEg5MRsRBS5QG27A1KndUk8O0k4Q0NoQGqbGwdumArpZ0n-ImgG0TNDwBbHU2Fsk88spWgIoNKpDG1DKdvf9W7R9dBk2flDAN5uXFDWdYD77nCDfPXt89A8wr69hOdSiZ1RMgrrAxE3FG0dihVPKPP6I8KQE5fMD6F2oyTY1IXwA2mpUBr0SYey4vTKjbc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bcf96d3-f11b-4a64-9a2f-71565b92ae75", "record_id": "flaws_cloudtrail:0000085:3bcf96d3-f11b-4a64-9a2f-71565b92ae75", "row_index": 85, "timestamp": "2019-06-13T12:35:32Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bcf96d3-f11b-4a64-9a2f-71565b92ae75", "eventTime": "2019-06-13T12:35:32Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqd6ASp_Jp9Li9qwl4ECJ8SttvZBMnSK6LGIiGd65HLltM-bSIxPwAe_I7DrOt7gDg7IBtufCCklOgWsNPRHDaomkBkf__eSymBYvKMY9jGqyTdyRGkZ_x7a5Kcd-81FUz9JGEolZkHBbSrx-aeXmK69PPO9pdqxwoCRWZOz6CCQgVB_qqQ24l_Ml0sTIR1nrLIt4g8AYc1BhcnXI1foYhLAnzWgfbKRW2hrI6f9QacZjV0hWgn4DFgeyL2WWZMRcC7tlj860ylZVgOeAXTi0CeGLoutXH3oJsmG6COpNjC0tfVqWwBqQpvUKVUUOdso-erKuEBrR91s0AwPeeKIHbng8IowDppqeGy3g56RwrPTM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4125e153-f28f-436b-9904-f0df994abc20", "record_id": "flaws_cloudtrail:0000086:4125e153-f28f-436b-9904-f0df994abc20", "row_index": 86, "timestamp": "2019-06-13T12:35:32Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4125e153-f28f-436b-9904-f0df994abc20", "eventTime": "2019-06-13T12:35:32Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqBQIkmvLwYVqrRgfoR0pkJtsDbxZBCil9nqVgwhLqQQoooPs83SWIWPC2SuyVFANi1_SgAdNYx7cxkoyGsCH3hJ64OT4FP0lsFKLPR6eUcekNp95lSDOwTb2MnytI9GVJC1lYivLZ-4LE5FeWhxmoz2WBIzFlvQlVycrth8ZCNkrX6qa--VqtseEYUtCtWeQJtcCWO-tVr7-IHVKr9PGiqsVpieIJr4oHNwQNe5jGY4f7ZXKMC0LyGhkSCRf00OJnvvTuPr7OeUFijGUC-S_0wacGmBKUVvTi14sdC4kLbGWzQwZ3pw-bHHrziSyoth9RFzY6xLPW15gk1phFB355GXndy99X3aYk5Ov284ciaY0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3386f65f-3238-4159-baf5-c4398fd5c0c9", "record_id": "flaws_cloudtrail:0000087:3386f65f-3238-4159-baf5-c4398fd5c0c9", "row_index": 87, "timestamp": "2019-06-13T12:35:32Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3386f65f-3238-4159-baf5-c4398fd5c0c9", "eventTime": "2019-06-13T12:35:32Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqZuJPvVtGv6iFN5ZuI7mliaB1yeb9Gd8zYTXyhnVYFS119gbHw62z3jZqsLfjRT8lQG-yFl7oqEuPrQB5KLDvfIvkUkOX14_qWc0skSR9bItAUHkv9RHqAT7MHT6U9mb3wuPownTyKvHAZqOxrDHfXfQwU5FNERth4O93jN2rc0zQCbEg5MRsRBS5QG27A1KndUk8O0k4Q0NoQGqbGwdumArpZ0n-ImgG0TNDwBbHU2Fsk88spWgIoNKpDG1DKdvf9W7R9dBk2flDAN5uXFDWdYD77nCDfPXt89A8wr69hOdSiZ1RMgrrAxE3FG0dihVPKPP6I8KQE5fMD6F2oyTY1IXwA2mpUBr0SYey4vTKjbc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bcf96d3-f11b-4a64-9a2f-71565b92ae75", "record_id": "flaws_cloudtrail:0000088:3bcf96d3-f11b-4a64-9a2f-71565b92ae75", "row_index": 88, "timestamp": "2019-06-13T12:35:32Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bcf96d3-f11b-4a64-9a2f-71565b92ae75", "eventTime": "2019-06-13T12:35:32Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuNGKGNpmG-cg-ChH9xi8gqd6ASp_Jp9Li9qwl4ECJ8SttvZBMnSK6LGIiGd65HLltM-bSIxPwAe_I7DrOt7gDg7IBtufCCklOgWsNPRHDaomkBkf__eSymBYvKMY9jGqyTdyRGkZ_x7a5Kcd-81FUz9JGEolZkHBbSrx-aeXmK69PPO9pdqxwoCRWZOz6CCQgVB_qqQ24l_Ml0sTIR1nrLIt4g8AYc1BhcnXI1foYhLAnzWgfbKRW2hrI6f9QacZjV0hWgn4DFgeyL2WWZMRcC7tlj860ylZVgOeAXTi0CeGLoutXH3oJsmG6COpNjC0tfVqWwBqQpvUKVUUOdso-erKuEBrR91s0AwPeeKIHbng8IowDppqeGy3g56RwrPTM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "486b978d-04ee-46ac-84e3-d1d0b393de90", "record_id": "flaws_cloudtrail:0000089:486b978d-04ee-46ac-84e3-d1d0b393de90", "row_index": 89, "timestamp": "2019-06-13T12:35:33Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "486b978d-04ee-46ac-84e3-d1d0b393de90", "eventTime": "2019-06-13T12:35:33Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuFxarGdgSMdwfOG0dCAO3DJrpXMf8VazviWamJkvDa17REYJzQSIYxLJ28wA20igqPE26QU2i2lXf3dg8A2FMsRvCWOGVF7XAw6_0q89u0IgcXBozelgkfrEzPc4t5TTSN3EqZIewW5LV1IvsHzUh63rpLr1pJSndzUGsliHuqtYSnOrp_VjiHLK8bYLJs0D7DsyIc78jvOsVUAPVnzp0zLTjv40NNDKhajwDGrQcRaa26-dWvsVdp8WwnwjZC6aLUZZhzLrHr5B-EcZdiooLYK_msnV7gJ7asI-exBRQ3h90nNQ-2-AYHvj_HKvVbQTtIkRns_BTR0AJrjCEXCJ38f9-BVQ6u8HtYHDFb7rXJCROSCs60AExqQvfrac5I8ms"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2212fc8e-d94e-435a-bac2-c618c0d370b4", "record_id": "flaws_cloudtrail:0000090:2212fc8e-d94e-435a-bac2-c618c0d370b4", "row_index": 90, "timestamp": "2019-06-13T12:35:33Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2212fc8e-d94e-435a-bac2-c618c0d370b4", "eventTime": "2019-06-13T12:35:33Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvdtUlhsoMUqYICCYenUfX5602e9M875OW4AmQH_GqylTaltt6c1iHf00K67ZhGg6jHd50w98K5VDU91DXREvZPV9vb33UOZ8LyDFryDitDtmpIHufVQui9O_vUu8tEbkU1GvW6cVVOsmpb6JvBEQcN6dtlkWwtrSbgeuotD0aUYAju_NOYK3pu5DeT27Cs8zFfL3C4x1_QGPuStGtn7Wep18Kp88RyJYwD5Wirx6IQ88boTnS134SZMp6JZWgUJ7zN_Mv06u_mOx0rjCOw9yYIIf7GVgNL7GAFdJIMqertvPcmQKyPXPAc36QosXQJJa7MdvnpLXoxVObzDqYmRL7lhNtt6jCFAbT9-MG7x0L5EO4PFFme4wvju18gqs4EJAo"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462bdf12-b486-4f8a-ad4d-0fa847e43f3c", "record_id": "flaws_cloudtrail:0000091:462bdf12-b486-4f8a-ad4d-0fa847e43f3c", "row_index": 91, "timestamp": "2019-06-13T12:35:33Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462bdf12-b486-4f8a-ad4d-0fa847e43f3c", "eventTime": "2019-06-13T12:35:33Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbsbeZc7OZxlNdyv7EcMkvsN4GsF1BTdV2brNRG6QD95Fbdmzxe_uIPN_nJdYOJmsU4dOzO_gJIOdCP5MfpH5IwUvnKa7jpaTO0fGMkP8eemWTVS6CKeOZewDFWwh_ndMsgUy3WrL2Z0WexzxKKdGieptGHgYk0d8HxHAAO_mkJToeQ2Z9nzG2vIy205pF8SrTQVISsIVywpJid2zADLhHVBds3iWkmbleezX-TIqGzUMyCLWXlOlSnRtWjbnvOxlVXPVUTgNOxyuksE82EE-RVs50qr6kKf_kbvLv7cRK8T-GcgrGt_pecGwXSE8mniTQbIBaNxGBpeuUewqgtilAeQdxgHEyzviYuBSyHnlJbz4YgjkeNlP00VCH79fPQRWgQ"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "486b978d-04ee-46ac-84e3-d1d0b393de90", "record_id": "flaws_cloudtrail:0000092:486b978d-04ee-46ac-84e3-d1d0b393de90", "row_index": 92, "timestamp": "2019-06-13T12:35:33Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "486b978d-04ee-46ac-84e3-d1d0b393de90", "eventTime": "2019-06-13T12:35:33Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuFxarGdgSMdwfOG0dCAO3DJrpXMf8VazviWamJkvDa17REYJzQSIYxLJ28wA20igqPE26QU2i2lXf3dg8A2FMsRvCWOGVF7XAw6_0q89u0IgcXBozelgkfrEzPc4t5TTSN3EqZIewW5LV1IvsHzUh63rpLr1pJSndzUGsliHuqtYSnOrp_VjiHLK8bYLJs0D7DsyIc78jvOsVUAPVnzp0zLTjv40NNDKhajwDGrQcRaa26-dWvsVdp8WwnwjZC6aLUZZhzLrHr5B-EcZdiooLYK_msnV7gJ7asI-exBRQ3h90nNQ-2-AYHvj_HKvVbQTtIkRns_BTR0AJrjCEXCJ38f9-BVQ6u8HtYHDFb7rXJCROSCs60AExqQvfrac5I8ms"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2212fc8e-d94e-435a-bac2-c618c0d370b4", "record_id": "flaws_cloudtrail:0000093:2212fc8e-d94e-435a-bac2-c618c0d370b4", "row_index": 93, "timestamp": "2019-06-13T12:35:33Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2212fc8e-d94e-435a-bac2-c618c0d370b4", "eventTime": "2019-06-13T12:35:33Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvdtUlhsoMUqYICCYenUfX5602e9M875OW4AmQH_GqylTaltt6c1iHf00K67ZhGg6jHd50w98K5VDU91DXREvZPV9vb33UOZ8LyDFryDitDtmpIHufVQui9O_vUu8tEbkU1GvW6cVVOsmpb6JvBEQcN6dtlkWwtrSbgeuotD0aUYAju_NOYK3pu5DeT27Cs8zFfL3C4x1_QGPuStGtn7Wep18Kp88RyJYwD5Wirx6IQ88boTnS134SZMp6JZWgUJ7zN_Mv06u_mOx0rjCOw9yYIIf7GVgNL7GAFdJIMqertvPcmQKyPXPAc36QosXQJJa7MdvnpLXoxVObzDqYmRL7lhNtt6jCFAbT9-MG7x0L5EO4PFFme4wvju18gqs4EJAo"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462bdf12-b486-4f8a-ad4d-0fa847e43f3c", "record_id": "flaws_cloudtrail:0000094:462bdf12-b486-4f8a-ad4d-0fa847e43f3c", "row_index": 94, "timestamp": "2019-06-13T12:35:33Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462bdf12-b486-4f8a-ad4d-0fa847e43f3c", "eventTime": "2019-06-13T12:35:33Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbsbeZc7OZxlNdyv7EcMkvsN4GsF1BTdV2brNRG6QD95Fbdmzxe_uIPN_nJdYOJmsU4dOzO_gJIOdCP5MfpH5IwUvnKa7jpaTO0fGMkP8eemWTVS6CKeOZewDFWwh_ndMsgUy3WrL2Z0WexzxKKdGieptGHgYk0d8HxHAAO_mkJToeQ2Z9nzG2vIy205pF8SrTQVISsIVywpJid2zADLhHVBds3iWkmbleezX-TIqGzUMyCLWXlOlSnRtWjbnvOxlVXPVUTgNOxyuksE82EE-RVs50qr6kKf_kbvLv7cRK8T-GcgrGt_pecGwXSE8mniTQbIBaNxGBpeuUewqgtilAeQdxgHEyzviYuBSyHnlJbz4YgjkeNlP00VCH79fPQRWgQ"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7404f88f-6e2b-48a2-9586-4a96b660ba85", "record_id": "flaws_cloudtrail:0000095:7404f88f-6e2b-48a2-9586-4a96b660ba85", "row_index": 95, "timestamp": "2019-06-13T12:35:34Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7404f88f-6e2b-48a2-9586-4a96b660ba85", "eventTime": "2019-06-13T12:35:34Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvdtUlhsoMUqYICCYenUfX5vQlLp0MIokJAJS1bObllYnGU49zp_HiVD452rA0BRJc1VjkB4wcLsMaowRhquGO4s2WYfUiG_fx89qN_-nNZUSm0Z7L7dszvdmtYbPUP6jP9eBWKxG6yv14_s1mq67VCDFVxZNgzd2DeaX2H2zl4fetvowufTrydh-EkR5BOsngsFmiBjO3Vr0cK46MtX03NsU4rlou9P6000cwgtMt7Bd7Vvsa6VgKOK1i6UxPhwQ8cpXmdy_qW65zOrZTqo41-I66YS5BgNwsVTUttBK9GaELKt2HuRgNpVnzaeVcgZ_epfPU6ctDmWoVT2s8zhJo4HobnzLyKkXMi095iDkYwU1Z1WTvufR_aiz_fOe07Umk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c861a1b-cab5-48ab-9886-9f2a9b737a34", "record_id": "flaws_cloudtrail:0000096:8c861a1b-cab5-48ab-9886-9f2a9b737a34", "row_index": 96, "timestamp": "2019-06-13T12:35:34Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c861a1b-cab5-48ab-9886-9f2a9b737a34", "eventTime": "2019-06-13T12:35:34Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbsqjXl3UXPI91C-5rLo2SG-HU-KNC1-IzJ1tcE2VjIltUsPJHlvcn7o6IZG6jt_wipsWKartcmck4ARGTCPZsQzmc3DOlKnspkaUs_qEXX7D7CUjcKwtgkFVfp7SKBkykQeuVx0e6Z5Ep9WmfKzHVmJuG4P4Jre6hIrtbsVb33TfW33TGQwcmo38OKy1JocMpkKz_iadLSXbCCoSJwjdzDY23ZhzJ49TY2crzDk_S_Ksmf_gmfvg7MXkh90Yx-kkvhLsBDG7J2zJJ2GbxH47R4crIQ6otVqfy14MWx2DyHUH5TEP0dg2M22zO5GH4VBlcdNXj-J85GoVlWHV3G6qf5tEsVFIXqq-kUF8F-c8n0QgVblWJj6IKf1ZBIgm00GUoI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7404f88f-6e2b-48a2-9586-4a96b660ba85", "record_id": "flaws_cloudtrail:0000097:7404f88f-6e2b-48a2-9586-4a96b660ba85", "row_index": 97, "timestamp": "2019-06-13T12:35:34Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7404f88f-6e2b-48a2-9586-4a96b660ba85", "eventTime": "2019-06-13T12:35:34Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvdtUlhsoMUqYICCYenUfX5vQlLp0MIokJAJS1bObllYnGU49zp_HiVD452rA0BRJc1VjkB4wcLsMaowRhquGO4s2WYfUiG_fx89qN_-nNZUSm0Z7L7dszvdmtYbPUP6jP9eBWKxG6yv14_s1mq67VCDFVxZNgzd2DeaX2H2zl4fetvowufTrydh-EkR5BOsngsFmiBjO3Vr0cK46MtX03NsU4rlou9P6000cwgtMt7Bd7Vvsa6VgKOK1i6UxPhwQ8cpXmdy_qW65zOrZTqo41-I66YS5BgNwsVTUttBK9GaELKt2HuRgNpVnzaeVcgZ_epfPU6ctDmWoVT2s8zhJo4HobnzLyKkXMi095iDkYwU1Z1WTvufR_aiz_fOe07Umk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c861a1b-cab5-48ab-9886-9f2a9b737a34", "record_id": "flaws_cloudtrail:0000098:8c861a1b-cab5-48ab-9886-9f2a9b737a34", "row_index": 98, "timestamp": "2019-06-13T12:35:34Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c861a1b-cab5-48ab-9886-9f2a9b737a34", "eventTime": "2019-06-13T12:35:34Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbsqjXl3UXPI91C-5rLo2SG-HU-KNC1-IzJ1tcE2VjIltUsPJHlvcn7o6IZG6jt_wipsWKartcmck4ARGTCPZsQzmc3DOlKnspkaUs_qEXX7D7CUjcKwtgkFVfp7SKBkykQeuVx0e6Z5Ep9WmfKzHVmJuG4P4Jre6hIrtbsVb33TfW33TGQwcmo38OKy1JocMpkKz_iadLSXbCCoSJwjdzDY23ZhzJ49TY2crzDk_S_Ksmf_gmfvg7MXkh90Yx-kkvhLsBDG7J2zJJ2GbxH47R4crIQ6otVqfy14MWx2DyHUH5TEP0dg2M22zO5GH4VBlcdNXj-J85GoVlWHV3G6qf5tEsVFIXqq-kUF8F-c8n0QgVblWJj6IKf1ZBIgm00GUoI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f7047b2-cc61-42e5-96ac-9192055671e7", "record_id": "flaws_cloudtrail:0000099:5f7047b2-cc61-42e5-96ac-9192055671e7", "row_index": 99, "timestamp": "2019-06-13T12:35:35Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f7047b2-cc61-42e5-96ac-9192055671e7", "eventTime": "2019-06-13T12:35:35Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuD_EuQKh-dwn8B-itm3FyO96sAPkOLUq1KO4oytgErB5iCYGy6ijXvdG5-5opRnm5p-kNDzGpLx2CNLtfXYvhuDt3RL56IUkqjfk6JwPDMN2sfB_3r2LxawVGhLvLzZ9z5TPESsA6AyaSpqn6zmZpip9FkAZXbIg2LZDQ5KsZkkC5cjSf2mmzUmXxv0kKm1Nclu3U_Lf4VwH4s0SIIxVhrLeHtsyb0lwzpKzv-qLl-rnIji9bYyyHQ2Ok2RrqXSZAa86qoeK5VPdXpHtumlQa8bsiRlh7je8UfsjY2dHytP2dNijDcvruNIV3Vx7m8EsozG7syW-dxoZ4Tr_YPWRJCFD6bgAILwlEDwFps2zzOu_QBckP73c1waEeJUzt7zEM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19fa21de-bd7a-492a-b634-5e1a1f9366aa", "record_id": "flaws_cloudtrail:0000100:19fa21de-bd7a-492a-b634-5e1a1f9366aa", "row_index": 100, "timestamp": "2019-06-13T12:35:35Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19fa21de-bd7a-492a-b634-5e1a1f9366aa", "eventTime": "2019-06-13T12:35:35Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuKogbS6qaGRVWo-aNvlnVBZ2BCSrlnAxIH3zRGEBaKKHfwKBmuI7Kp5rrxmrXq7Jmk5w8KMwJsMcyjaA2opO3S9MDjaTGVe9G-g_h9lWPvBHV6ZlBZBSPK0Xd9__bwhetQ9XEkQumVJmC0KfILXgxG-feoOBr6AJeRMwx6KKjDNWcAU1yEcl4Dhnp2YuyP77RfYiyd5yFwy5CpBwH4UyeWVoBDjDo0Jt6eDiFYWs3li8QdUfCATkFV87hc_oh7PjkTokuE7F4vEPpaMvURZ7WPhu7YnyRep3lKDfgO2o9jeFg4LDC3uSYNwLVy3quB-2BH7oMHGsAS2NPs_WKPPO8nwPzRcDnvL0L-ODj9sYGSUkpz1RuV_8vZ37yRWSuoR0c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c03951c9-12ed-4aad-9cd0-37179a6f9a93", "record_id": "flaws_cloudtrail:0000101:c03951c9-12ed-4aad-9cd0-37179a6f9a93", "row_index": 101, "timestamp": "2019-06-13T12:35:35Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c03951c9-12ed-4aad-9cd0-37179a6f9a93", "eventTime": "2019-06-13T12:35:35Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvpHBJ1ewtKKdoLPTFlp9R0inGid2Q10trJObh44l4a52IDs0pd-zrHp1STzbkLuOKgOqfpD_il38zGJL22hwcYa5Fv141a4dbwsTLrTpPM7AI_MA5kgl7RWRe1hjWHD59sFue3EB9wklAvl8ziPaf6xq7dXlfFej_63jqdchVemx34RUQvLKNTAuB3OksS4Uz7B9zCrn9cKxruY8zcPNr7H5Jadkhe2TepESvo77WTySKsLGP5q1JHvfIs2UWuuJLRR04-_4gXQr87gbLb9BFaSQXVVbBLVOfDa0H9r80xXJiok1PUBAiX8xG_O7aObhTFlH04Sd_X9eIopwpUZNLRmNBU8t_kTPdKeOMaGILxxXtDk-UX03Za9Bdgetg8WTo"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f7047b2-cc61-42e5-96ac-9192055671e7", "record_id": "flaws_cloudtrail:0000102:5f7047b2-cc61-42e5-96ac-9192055671e7", "row_index": 102, "timestamp": "2019-06-13T12:35:35Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f7047b2-cc61-42e5-96ac-9192055671e7", "eventTime": "2019-06-13T12:35:35Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuD_EuQKh-dwn8B-itm3FyO96sAPkOLUq1KO4oytgErB5iCYGy6ijXvdG5-5opRnm5p-kNDzGpLx2CNLtfXYvhuDt3RL56IUkqjfk6JwPDMN2sfB_3r2LxawVGhLvLzZ9z5TPESsA6AyaSpqn6zmZpip9FkAZXbIg2LZDQ5KsZkkC5cjSf2mmzUmXxv0kKm1Nclu3U_Lf4VwH4s0SIIxVhrLeHtsyb0lwzpKzv-qLl-rnIji9bYyyHQ2Ok2RrqXSZAa86qoeK5VPdXpHtumlQa8bsiRlh7je8UfsjY2dHytP2dNijDcvruNIV3Vx7m8EsozG7syW-dxoZ4Tr_YPWRJCFD6bgAILwlEDwFps2zzOu_QBckP73c1waEeJUzt7zEM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19fa21de-bd7a-492a-b634-5e1a1f9366aa", "record_id": "flaws_cloudtrail:0000103:19fa21de-bd7a-492a-b634-5e1a1f9366aa", "row_index": 103, "timestamp": "2019-06-13T12:35:35Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19fa21de-bd7a-492a-b634-5e1a1f9366aa", "eventTime": "2019-06-13T12:35:35Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuKogbS6qaGRVWo-aNvlnVBZ2BCSrlnAxIH3zRGEBaKKHfwKBmuI7Kp5rrxmrXq7Jmk5w8KMwJsMcyjaA2opO3S9MDjaTGVe9G-g_h9lWPvBHV6ZlBZBSPK0Xd9__bwhetQ9XEkQumVJmC0KfILXgxG-feoOBr6AJeRMwx6KKjDNWcAU1yEcl4Dhnp2YuyP77RfYiyd5yFwy5CpBwH4UyeWVoBDjDo0Jt6eDiFYWs3li8QdUfCATkFV87hc_oh7PjkTokuE7F4vEPpaMvURZ7WPhu7YnyRep3lKDfgO2o9jeFg4LDC3uSYNwLVy3quB-2BH7oMHGsAS2NPs_WKPPO8nwPzRcDnvL0L-ODj9sYGSUkpz1RuV_8vZ37yRWSuoR0c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c03951c9-12ed-4aad-9cd0-37179a6f9a93", "record_id": "flaws_cloudtrail:0000104:c03951c9-12ed-4aad-9cd0-37179a6f9a93", "row_index": 104, "timestamp": "2019-06-13T12:35:35Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c03951c9-12ed-4aad-9cd0-37179a6f9a93", "eventTime": "2019-06-13T12:35:35Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvpHBJ1ewtKKdoLPTFlp9R0inGid2Q10trJObh44l4a52IDs0pd-zrHp1STzbkLuOKgOqfpD_il38zGJL22hwcYa5Fv141a4dbwsTLrTpPM7AI_MA5kgl7RWRe1hjWHD59sFue3EB9wklAvl8ziPaf6xq7dXlfFej_63jqdchVemx34RUQvLKNTAuB3OksS4Uz7B9zCrn9cKxruY8zcPNr7H5Jadkhe2TepESvo77WTySKsLGP5q1JHvfIs2UWuuJLRR04-_4gXQr87gbLb9BFaSQXVVbBLVOfDa0H9r80xXJiok1PUBAiX8xG_O7aObhTFlH04Sd_X9eIopwpUZNLRmNBU8t_kTPdKeOMaGILxxXtDk-UX03Za9Bdgetg8WTo"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcdd36c4-4931-4c4b-aaa1-2f5f1f436ead", "record_id": "flaws_cloudtrail:0000105:fcdd36c4-4931-4c4b-aaa1-2f5f1f436ead", "row_index": 105, "timestamp": "2019-06-13T12:35:36Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcdd36c4-4931-4c4b-aaa1-2f5f1f436ead", "eventTime": "2019-06-13T12:35:36Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEburxhHNG8FZYq0xIMzWtavm9PQqq7r4fYYQthABthCerIoxA4iVjXdVdor0FruAm4cDc-LjTTjPFmZQZGlbeEEDFvWz7nHZaHff8QLHBukJrOkINWJpi6WQofRdOAh-qD7XkykPQAQvzyqof56h1DFinu9IxL4z-jVLvuACDUpJEJebwAFxAE-nZUVSpN5P_-S9Fa2WUJyjp_i3ni3pQVFb43BHBRTaQ9dc4xwoTqcAA5KnrltUJcqoro1nIjDF-YAnaj-9WFVj_-t-9NyKpCZxSCR9O8YVtHQ2nKK8VjnED9YsEQTD-oiBYbz-OpE1avQd3quMRdkBlv4Wsj-BsV1xCA6nRqSg8EtYQOObGl_b9WP-6bb025KsFi6Uv_8ku8A"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2c21b0-c822-43cb-83f5-7edd3e804522", "record_id": "flaws_cloudtrail:0000106:2d2c21b0-c822-43cb-83f5-7edd3e804522", "row_index": 106, "timestamp": "2019-06-13T12:35:36Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2c21b0-c822-43cb-83f5-7edd3e804522", "eventTime": "2019-06-13T12:35:36Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuU9HHdmwEtM4zJjthHwG8GnUtLsd_xL7KkaJ1-v8MnnLPKobfiCvJoHvLrg_eoaZ5BT7EvZK1Rxs5TUWpgNROvSWzqvC0oUrL-aQN3KiK39919e835OaCe1B3OJy57gPeqiEsUjZAWdlUypE1SpjW4BFt3Szq05jrmtKNOk_dCSApMADae5bWJjP5ULyBiIl8b0kXaZ5Itd8ZTPelYjrgQkHgiR_HEbrce1sNP2ye_BRX1ST3NQ3Ec0QMHqlysr2wYPAvNbYtBIS5-gzKoA5va9tMYFd2aXfjtJAzYYYV9KO3GGzhJ1GISnLbFXvWzA_qqLq2eEbFnxLriENg89YW3RC_FL7q9Nlxc7tQxIEc0crBzas-RupzgwE3mTaa_S3c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6626d85c-f211-4750-9767-417451e2942d4", "record_id": "flaws_cloudtrail:0000107:6626d85c-f211-4750-9767-417451e2942d4", "row_index": 107, "timestamp": "2019-06-13T12:35:36Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6626d85c-f211-4750-9767-417451e2942d4", "eventTime": "2019-06-13T12:35:36Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEburxhHNG8FZYq0xIMzWtavmIQOME0MKZPGMXe-cWugSFl91VTchD81qiCZ9geC1t1g0a6Cd4lHgwrRJHSg0jB4Ruh-UheUKlF930XUi_JXZ_anbOCrjX5fhglL6xLVvNNT45_fEw_WSmKb10LFzQmIYQihNeMfVES_94h6r0RQA2YPEKCQvt8drJDH0X_pgmVE5TbTFMqoDJLZZX1t__oOpVL7dMdg6RI76-sqzD28CZptAs6MRbSGhftkKgWiB6qPRarlnBwRdMX-PpQsK4FKyv5PAFXWiPqixtZahUIydX-hlcejTvv6-I9ChsCcVNnkbZm40a3S4IPZDanAQV7jrFwsGIpvcWsUVInlkOC95fu1Q728r3sDDJ5B6bHLzgCI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcdd36c4-4931-4c4b-aaa1-2f5f1f436ead", "record_id": "flaws_cloudtrail:0000108:fcdd36c4-4931-4c4b-aaa1-2f5f1f436ead", "row_index": 108, "timestamp": "2019-06-13T12:35:36Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcdd36c4-4931-4c4b-aaa1-2f5f1f436ead", "eventTime": "2019-06-13T12:35:36Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEburxhHNG8FZYq0xIMzWtavm9PQqq7r4fYYQthABthCerIoxA4iVjXdVdor0FruAm4cDc-LjTTjPFmZQZGlbeEEDFvWz7nHZaHff8QLHBukJrOkINWJpi6WQofRdOAh-qD7XkykPQAQvzyqof56h1DFinu9IxL4z-jVLvuACDUpJEJebwAFxAE-nZUVSpN5P_-S9Fa2WUJyjp_i3ni3pQVFb43BHBRTaQ9dc4xwoTqcAA5KnrltUJcqoro1nIjDF-YAnaj-9WFVj_-t-9NyKpCZxSCR9O8YVtHQ2nKK8VjnED9YsEQTD-oiBYbz-OpE1avQd3quMRdkBlv4Wsj-BsV1xCA6nRqSg8EtYQOObGl_b9WP-6bb025KsFi6Uv_8ku8A"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2c21b0-c822-43cb-83f5-7edd3e804522", "record_id": "flaws_cloudtrail:0000109:2d2c21b0-c822-43cb-83f5-7edd3e804522", "row_index": 109, "timestamp": "2019-06-13T12:35:36Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2c21b0-c822-43cb-83f5-7edd3e804522", "eventTime": "2019-06-13T12:35:36Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuU9HHdmwEtM4zJjthHwG8GnUtLsd_xL7KkaJ1-v8MnnLPKobfiCvJoHvLrg_eoaZ5BT7EvZK1Rxs5TUWpgNROvSWzqvC0oUrL-aQN3KiK39919e835OaCe1B3OJy57gPeqiEsUjZAWdlUypE1SpjW4BFt3Szq05jrmtKNOk_dCSApMADae5bWJjP5ULyBiIl8b0kXaZ5Itd8ZTPelYjrgQkHgiR_HEbrce1sNP2ye_BRX1ST3NQ3Ec0QMHqlysr2wYPAvNbYtBIS5-gzKoA5va9tMYFd2aXfjtJAzYYYV9KO3GGzhJ1GISnLbFXvWzA_qqLq2eEbFnxLriENg89YW3RC_FL7q9Nlxc7tQxIEc0crBzas-RupzgwE3mTaa_S3c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6626d85c-f211-4750-9767-417451e2942d4", "record_id": "flaws_cloudtrail:0000110:6626d85c-f211-4750-9767-417451e2942d4", "row_index": 110, "timestamp": "2019-06-13T12:35:36Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6626d85c-f211-4750-9767-417451e2942d4", "eventTime": "2019-06-13T12:35:36Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEburxhHNG8FZYq0xIMzWtavmIQOME0MKZPGMXe-cWugSFl91VTchD81qiCZ9geC1t1g0a6Cd4lHgwrRJHSg0jB4Ruh-UheUKlF930XUi_JXZ_anbOCrjX5fhglL6xLVvNNT45_fEw_WSmKb10LFzQmIYQihNeMfVES_94h6r0RQA2YPEKCQvt8drJDH0X_pgmVE5TbTFMqoDJLZZX1t__oOpVL7dMdg6RI76-sqzD28CZptAs6MRbSGhftkKgWiB6qPRarlnBwRdMX-PpQsK4FKyv5PAFXWiPqixtZahUIydX-hlcejTvv6-I9ChsCcVNnkbZm40a3S4IPZDanAQV7jrFwsGIpvcWsUVInlkOC95fu1Q728r3sDDJ5B6bHLzgCI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20718f80-6363-42f6-9dc3-ad379147ef91f", "record_id": "flaws_cloudtrail:0000111:20718f80-6363-42f6-9dc3-ad379147ef91f", "row_index": 111, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20718f80-6363-42f6-9dc3-ad379147ef91f", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvwZvEVZbna8ZO17gtVZn68WLCgq_wf5_VFOk-g6OrK2LItQgzDd5Ln0Y-leCmFr39oyywZk2FxU3eRwKJ55OVGXE6OysVxMFHuTawqoJH-9QXTGT4IhreGC2nh_60kYdPiyx6tmg2tQnXLjMQRzSP9h9kDXnEORScbhDXx0Jkl1oK4EuiPBF5YmqHC2dfU7kjjbhiL_wM2nkQxRFPqoXQZNjCawBoNsNBkO1JPdKyVrSZBbKqcd8Yf-Fd3oBRjNWUa-QMBsOXGurJbGiZ7N6DqSQpfxDE5VC212HXdCq2PjvkVOSYiFIaXRf-2cKtgk2FyeoqvNBOxT7BbB7YyMah0ZMVifcWsDKbtbRQxyn0Kf0QxYP5VnGyI6XuloMqlDpk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892a3f4a-b8c4-4a29-a53f-b6c76e76682e", "record_id": "flaws_cloudtrail:0000112:892a3f4a-b8c4-4a29-a53f-b6c76e76682e", "row_index": 112, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892a3f4a-b8c4-4a29-a53f-b6c76e76682e", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvM5IvaPTc6r29-sNdehZh484Gv3V994q_h30BKKNAizGSjQ6ZIMatLHwCd7HoPRtaeBEa5yv6Dl5wTNyhN7pefHZxylWqHBnEF1F7AcWtK4iodL96MOVpIjIIuwNyYWh-SekKzAGLUVtXt_I3aL7zcK8cI3W7Jtfw11JHwSVujsJRgl8VMahtlSsYOOW-31aYgFTto0bYlRfA52nfZ6kNi3nLNXf9XdKJ0EltDuKVkoN8cFuygbyJVLNNBCLNS8MSlJM5LPZVZn1SGi563sgkXh0MOO2C3wAu7V_Ro1YDWCTZeWrmrCLh3TfPRiq8MkzEQscmy1sAMlQqVkzUZRY0VcYPmVoILGb-sf2VV8FtxiXiizjZWWkNxqxjBhnlWyiE"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eade4a63-2269-4e43-917f-323776df8cf1", "record_id": "flaws_cloudtrail:0000113:eade4a63-2269-4e43-917f-323776df8cf1", "row_index": 113, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eade4a63-2269-4e43-917f-323776df8cf1", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuxmOr_BPz0ORApBSmyw7gwSB5VdFbJwMttxOr6Ewre1EH4GQ4FTgen2X3IEpp1C9n2WyyPlT9VhvVGj_TRwPW2fv9u4XIuRDPWouSt8wRA4IyjL9Tan7ixqXESMnMAoorgfY3Cs2IUpndZiE-2HBm9003FVa3ptkEQ_xaNXKvlDKIZDbyXxSNWaLJ53aG4t5qrn8RK1PAPv1WZ0RcMbxPPpHvvY9HWmpPG0kW7_uB17Ly4frDfiXA0vrw0TB81lWOwHHnWnSOJ6de10wJNquJXaZOIeiOgK2Unbf5EuS5WG3A5VcYQQ4S6bE1nmGQTTM6mmPS3IoRV8rbHV80-q-M7i6TFOuwPkHJPAfup0G5sF04G6VE7osDc63xlTRpgLKI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45388f7d-c614-43a6-be86-b8e61bd632b3", "record_id": "flaws_cloudtrail:0000114:45388f7d-c614-43a6-be86-b8e61bd632b3", "row_index": 114, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45388f7d-c614-43a6-be86-b8e61bd632b3", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuxmOr_BPz0ORApBSmyw7gwdvEHFXXI2LrbTacnTakcbhgFxeG0ijNdkAPG8mVxbr5WDeaQE3uJqvDOK8JXjFvPkYbVWA9t1nr2olvOT70l0dy5O_DPygXIO8wOjm6vfnU9xOH1-DtzppvmJk3BHsmbW7I-W9zlurFpi3idn53chOyYOHTM42z4YHjNlaLyKXyHD1b_oXXmtsNLDT6DLtynogSeMczVZDzon3GumXNx0YogQyXzyr4DVp1KgtnNOCQZLv_y3UIgRmSIX-8hbPTkTj741o_eb0YLVBljmMLRVPxjlCXy7UTF66cUjvuYAEqJDeAumeHYkR9T1LO-AJGDAzglowCFsYQ2tUSKR7rUkz7qnG8tmGMZLACJxMOcS9o"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "903448cae-eb12-47b1-9b95-05e3760cddca", "record_id": "flaws_cloudtrail:0000115:903448cae-eb12-47b1-9b95-05e3760cddca", "row_index": 115, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "903448cae-eb12-47b1-9b95-05e3760cddca", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvM5IvaPTc6r29-sNdehZh41IzvQBFXwBVFYYwWVnFpLJHnwLBhACjPbOVqhmq9qU8akkJBqv1sCGKPjVnu8MD62M6q7o_HTLyeExr1kqmI-WWzUQTW08OhLIOmoby3wcTuJxzCo6bL0SLBSlMBMa_WR7z_FkCYP09pGYrisRchMFaWOQXcPqBs89-qdBMnT4ZuYNxjY_32eZbz3MOjE26vyFrEkb4b9_SXdQ_R_sFDa5Xr2KT6J-LrFFfwqo5On95ewwS9ajtPse3d8t8aM9uU_Veg5vD8pPGO1XC6gJNq7IXpranBd42urvysUhKfehXdxvSBND9YuZHe8TXQwEGRU46GKb0zLv_o1mMNhfnXrRa6rGbfVxRLihsLVHAHbr0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20718f80-6363-42f6-9dc3-ad379147ef91f", "record_id": "flaws_cloudtrail:0000116:20718f80-6363-42f6-9dc3-ad379147ef91f", "row_index": 116, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20718f80-6363-42f6-9dc3-ad379147ef91f", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvwZvEVZbna8ZO17gtVZn68WLCgq_wf5_VFOk-g6OrK2LItQgzDd5Ln0Y-leCmFr39oyywZk2FxU3eRwKJ55OVGXE6OysVxMFHuTawqoJH-9QXTGT4IhreGC2nh_60kYdPiyx6tmg2tQnXLjMQRzSP9h9kDXnEORScbhDXx0Jkl1oK4EuiPBF5YmqHC2dfU7kjjbhiL_wM2nkQxRFPqoXQZNjCawBoNsNBkO1JPdKyVrSZBbKqcd8Yf-Fd3oBRjNWUa-QMBsOXGurJbGiZ7N6DqSQpfxDE5VC212HXdCq2PjvkVOSYiFIaXRf-2cKtgk2FyeoqvNBOxT7BbB7YyMah0ZMVifcWsDKbtbRQxyn0Kf0QxYP5VnGyI6XuloMqlDpk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892a3f4a-b8c4-4a29-a53f-b6c76e76682e", "record_id": "flaws_cloudtrail:0000117:892a3f4a-b8c4-4a29-a53f-b6c76e76682e", "row_index": 117, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892a3f4a-b8c4-4a29-a53f-b6c76e76682e", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvM5IvaPTc6r29-sNdehZh484Gv3V994q_h30BKKNAizGSjQ6ZIMatLHwCd7HoPRtaeBEa5yv6Dl5wTNyhN7pefHZxylWqHBnEF1F7AcWtK4iodL96MOVpIjIIuwNyYWh-SekKzAGLUVtXt_I3aL7zcK8cI3W7Jtfw11JHwSVujsJRgl8VMahtlSsYOOW-31aYgFTto0bYlRfA52nfZ6kNi3nLNXf9XdKJ0EltDuKVkoN8cFuygbyJVLNNBCLNS8MSlJM5LPZVZn1SGi563sgkXh0MOO2C3wAu7V_Ro1YDWCTZeWrmrCLh3TfPRiq8MkzEQscmy1sAMlQqVkzUZRY0VcYPmVoILGb-sf2VV8FtxiXiizjZWWkNxqxjBhnlWyiE"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eade4a63-2269-4e43-917f-323776df8cf1", "record_id": "flaws_cloudtrail:0000118:eade4a63-2269-4e43-917f-323776df8cf1", "row_index": 118, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eade4a63-2269-4e43-917f-323776df8cf1", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuxmOr_BPz0ORApBSmyw7gwSB5VdFbJwMttxOr6Ewre1EH4GQ4FTgen2X3IEpp1C9n2WyyPlT9VhvVGj_TRwPW2fv9u4XIuRDPWouSt8wRA4IyjL9Tan7ixqXESMnMAoorgfY3Cs2IUpndZiE-2HBm9003FVa3ptkEQ_xaNXKvlDKIZDbyXxSNWaLJ53aG4t5qrn8RK1PAPv1WZ0RcMbxPPpHvvY9HWmpPG0kW7_uB17Ly4frDfiXA0vrw0TB81lWOwHHnWnSOJ6de10wJNquJXaZOIeiOgK2Unbf5EuS5WG3A5VcYQQ4S6bE1nmGQTTM6mmPS3IoRV8rbHV80-q-M7i6TFOuwPkHJPAfup0G5sF04G6VE7osDc63xlTRpgLKI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45388f7d-c614-43a6-be86-b8e61bd632b3", "record_id": "flaws_cloudtrail:0000119:45388f7d-c614-43a6-be86-b8e61bd632b3", "row_index": 119, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45388f7d-c614-43a6-be86-b8e61bd632b3", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuxmOr_BPz0ORApBSmyw7gwdvEHFXXI2LrbTacnTakcbhgFxeG0ijNdkAPG8mVxbr5WDeaQE3uJqvDOK8JXjFvPkYbVWA9t1nr2olvOT70l0dy5O_DPygXIO8wOjm6vfnU9xOH1-DtzppvmJk3BHsmbW7I-W9zlurFpi3idn53chOyYOHTM42z4YHjNlaLyKXyHD1b_oXXmtsNLDT6DLtynogSeMczVZDzon3GumXNx0YogQyXzyr4DVp1KgtnNOCQZLv_y3UIgRmSIX-8hbPTkTj741o_eb0YLVBljmMLRVPxjlCXy7UTF66cUjvuYAEqJDeAumeHYkR9T1LO-AJGDAzglowCFsYQ2tUSKR7rUkz7qnG8tmGMZLACJxMOcS9o"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "903448cae-eb12-47b1-9b95-05e3760cddca", "record_id": "flaws_cloudtrail:0000120:903448cae-eb12-47b1-9b95-05e3760cddca", "row_index": 120, "timestamp": "2019-06-13T12:35:37Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "903448cae-eb12-47b1-9b95-05e3760cddca", "eventTime": "2019-06-13T12:35:37Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvM5IvaPTc6r29-sNdehZh41IzvQBFXwBVFYYwWVnFpLJHnwLBhACjPbOVqhmq9qU8akkJBqv1sCGKPjVnu8MD62M6q7o_HTLyeExr1kqmI-WWzUQTW08OhLIOmoby3wcTuJxzCo6bL0SLBSlMBMa_WR7z_FkCYP09pGYrisRchMFaWOQXcPqBs89-qdBMnT4ZuYNxjY_32eZbz3MOjE26vyFrEkb4b9_SXdQ_R_sFDa5Xr2KT6J-LrFFfwqo5On95ewwS9ajtPse3d8t8aM9uU_Veg5vD8pPGO1XC6gJNq7IXpranBd42urvysUhKfehXdxvSBND9YuZHe8TXQwEGRU46GKb0zLv_o1mMNhfnXrRa6rGbfVxRLihsLVHAHbr0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5463aff-1531-48d9-acd0-59a46304af5a", "record_id": "flaws_cloudtrail:0000121:d5463aff-1531-48d9-acd0-59a46304af5a", "row_index": 121, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5463aff-1531-48d9-acd0-59a46304af5a", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvs2YMX2J6vBTaGiOtSjoySIzdvhEyEVrYGn4OTVwL1pOFouQxKxZsvqQnxiUgBFfjivn7A3ufEGBGj_N7Xue4fRQzW9I92dDeisTsOMlVX6Z-Y4eTpXTanf3OPUJCwhMwrv6uCyLuip07EEnAR0KZNmMqJnLvtlTmN7QpCwEnoQEE9GX5q5VHgdVG7i9zgyHDxTT0_c8Cxd_k1R9wTVCO4iMG5cHKYKWTXpgGtOZWyzQkfmBq6Tka6vBOZS2N5ygTNpfH9Xa0AaaxsucKB7N6Raj4p_OUkgOp9aVDnPjxzzeC4ILTJdptT1a41CYIz7y2DlpZlyCW6KzbuLjWSGV-nUZTm6aq_8KUk8CmcjmtykUPH6X60jFTltRNI2WNGdOk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "284532ea-420c-4396-b7eb-86fd566b3f4b", "record_id": "flaws_cloudtrail:0000122:284532ea-420c-4396-b7eb-86fd566b3f4b", "row_index": 122, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "284532ea-420c-4396-b7eb-86fd566b3f4b", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvs2YMX2J6vBTaGiOtSjoyS27xAQ6sMPmJ4vw056YnkPJZ8DdvOwp1L5DxNFUaLp4vyHQt1lbhwl1oFA32-2O76-Pr3tyZcf1T66hP_EiewqAZKYwEOlY1_3zF9ZvjfeFggbODAaSekjw8YIfx3Zv-aoqt5ZK4MZRcvpGRjIFA5VmJtf5_QvKQVUhtdI9PhMGqFK49jEfNsgZ2Q0tdRmm6Vc1bN2GwtQTDnVS6eE80DHuVJTCWrJMG3Wse8OSv6rp1Rae98fFz9xZTcUskAuRjxOVCO0iRZeal_alWPuXD5ln_mc448Q5EZndvV4iMGSkho_4TMwJhwKbsQa96ek66inwd3rZ8oUPmfCdbdE_HahE4kWqhmCzEIoTE_5guVGMc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05eb3afd-7d84-46ca-ad26-1bf76c02c353", "record_id": "flaws_cloudtrail:0000123:05eb3afd-7d84-46ca-ad26-1bf76c02c353", "row_index": 123, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05eb3afd-7d84-46ca-ad26-1bf76c02c353", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbtNfanzalduFjkT5alchhGN_PTU-N9eW6OWNANIAraLjMyvQ-ibCyycRe8fd0q-Yf6mglosJQ3LtWbZjB8gLRnGgzmULT5SyJfS7VLu-GWQA7Gmzkw4uXywroE28pK2Osa2HP5M34NRNhUutijqjot95veylN7ieEsMqHXotGz3rDBSW_UanyyTXkaF6B47wITZb-X8vb4NDlMwY8OEf9Jofm_hWQX-m7mc3b5J8BlHjSHOyUjW5zwBQ9t2sXuiphUZ74_dg26q-0nbG-MzKt-P8Womn0K1BREncJ8r_nW0Cm8SQvXkbcEjKznSDvzbAPjKeoi1x3Yn5_n_2pApjXFOXFVnykbRj-3bgaiWJhxhVfmnwUQB767HOg2RYVN1tdY"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b36d57-27a6-42dd-9eef-0004276bef1a", "record_id": "flaws_cloudtrail:0000124:e9b36d57-27a6-42dd-9eef-0004276bef1a", "row_index": 124, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b36d57-27a6-42dd-9eef-0004276bef1a", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbtN7ko3v7EvnTaXsNykNoDYoB2kpiSqCblzWCPbgHKXoNy5Wx_zyz1zehF7W_HyqhQMqEoRCnRkIwpEmLyCZ5b1X-VI8wklAv31zoNbgTRxXAkEVQxHhBUlgJtgZI6wHYVYjS28ZLrMRqnLaW2FbXy00O9fsug8PyTvTpCadjtcci3fF5-fkB_M8lIJhxV3AK4ikk1z6YQmawM9NSD3IHrmITae13JBWwaWjFCwrlrdn-xzluyBwIwFkmDkd1h4zwwW8y1NtVfTyWFCSdB5m5jKHE5J54w6Ryq3AK0OkYluMlPeXFkFK0VCwUPmilkc2MlXnYTVvgFxC4rSYsYZJOGBm_nQfPFYtqS-R2h2fgEhcAXftz5drNfcCYuPaNO1cBQ"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc0708d9-a840-4604-9924-f4f2bc7c8833", "record_id": "flaws_cloudtrail:0000125:fc0708d9-a840-4604-9924-f4f2bc7c8833", "row_index": 125, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc0708d9-a840-4604-9924-f4f2bc7c8833", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs8GCShnpdYkiA__HSWfJdqkeBSXK9MXFUVg8XDkwRvsy1q_t_x6oEmr2MzXwoCyrc198ScdgjAhzyQliZ1G9m3FFEGzHnWJ6zdF6JGg7qSBx54HSQw-D9PAbWrz-jYyM4yj8Ub0GUaRfiIMZBmZMs2ZU26n7R2I2TXJw3dbjCb_bYmMH7u_Cnr2Eu-VWiCZNMY_2ma2AC4LMzTsu-08va8K6g76xkly4PMqIXuxneh19gaK-WErCmCnTxZ7-cuyps1Qr1Tj_JCC6m7Rg7z72t7IfKjbAI4NdcRLXtJ71EQVqSENhtpdok0r6Fo-oCXe35I2HM0XYS8jBPJFUtdQnjmsFtGgW60HP95C1HCCChrw5RdiVzxPJToduVyH5Zl5pE"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5463aff-1531-48d9-acd0-59a46304af5a", "record_id": "flaws_cloudtrail:0000126:d5463aff-1531-48d9-acd0-59a46304af5a", "row_index": 126, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5463aff-1531-48d9-acd0-59a46304af5a", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvs2YMX2J6vBTaGiOtSjoySIzdvhEyEVrYGn4OTVwL1pOFouQxKxZsvqQnxiUgBFfjivn7A3ufEGBGj_N7Xue4fRQzW9I92dDeisTsOMlVX6Z-Y4eTpXTanf3OPUJCwhMwrv6uCyLuip07EEnAR0KZNmMqJnLvtlTmN7QpCwEnoQEE9GX5q5VHgdVG7i9zgyHDxTT0_c8Cxd_k1R9wTVCO4iMG5cHKYKWTXpgGtOZWyzQkfmBq6Tka6vBOZS2N5ygTNpfH9Xa0AaaxsucKB7N6Raj4p_OUkgOp9aVDnPjxzzeC4ILTJdptT1a41CYIz7y2DlpZlyCW6KzbuLjWSGV-nUZTm6aq_8KUk8CmcjmtykUPH6X60jFTltRNI2WNGdOk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "284532ea-420c-4396-b7eb-86fd566b3f4b", "record_id": "flaws_cloudtrail:0000127:284532ea-420c-4396-b7eb-86fd566b3f4b", "row_index": 127, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "284532ea-420c-4396-b7eb-86fd566b3f4b", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbvs2YMX2J6vBTaGiOtSjoyS27xAQ6sMPmJ4vw056YnkPJZ8DdvOwp1L5DxNFUaLp4vyHQt1lbhwl1oFA32-2O76-Pr3tyZcf1T66hP_EiewqAZKYwEOlY1_3zF9ZvjfeFggbODAaSekjw8YIfx3Zv-aoqt5ZK4MZRcvpGRjIFA5VmJtf5_QvKQVUhtdI9PhMGqFK49jEfNsgZ2Q0tdRmm6Vc1bN2GwtQTDnVS6eE80DHuVJTCWrJMG3Wse8OSv6rp1Rae98fFz9xZTcUskAuRjxOVCO0iRZeal_alWPuXD5ln_mc448Q5EZndvV4iMGSkho_4TMwJhwKbsQa96ek66inwd3rZ8oUPmfCdbdE_HahE4kWqhmCzEIoTE_5guVGMc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05eb3afd-7d84-46ca-ad26-1bf76c02c353", "record_id": "flaws_cloudtrail:0000128:05eb3afd-7d84-46ca-ad26-1bf76c02c353", "row_index": 128, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05eb3afd-7d84-46ca-ad26-1bf76c02c353", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbtNfanzalduFjkT5alchhGN_PTU-N9eW6OWNANIAraLjMyvQ-ibCyycRe8fd0q-Yf6mglosJQ3LtWbZjB8gLRnGgzmULT5SyJfS7VLu-GWQA7Gmzkw4uXywroE28pK2Osa2HP5M34NRNhUutijqjot95veylN7ieEsMqHXotGz3rDBSW_UanyyTXkaF6B47wITZb-X8vb4NDlMwY8OEf9Jofm_hWQX-m7mc3b5J8BlHjSHOyUjW5zwBQ9t2sXuiphUZ74_dg26q-0nbG-MzKt-P8Womn0K1BREncJ8r_nW0Cm8SQvXkbcEjKznSDvzbAPjKeoi1x3Yn5_n_2pApjXFOXFVnykbRj-3bgaiWJhxhVfmnwUQB767HOg2RYVN1tdY"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b36d57-27a6-42dd-9eef-0004276bef1a", "record_id": "flaws_cloudtrail:0000129:e9b36d57-27a6-42dd-9eef-0004276bef1a", "row_index": 129, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b36d57-27a6-42dd-9eef-0004276bef1a", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbtN7ko3v7EvnTaXsNykNoDYoB2kpiSqCblzWCPbgHKXoNy5Wx_zyz1zehF7W_HyqhQMqEoRCnRkIwpEmLyCZ5b1X-VI8wklAv31zoNbgTRxXAkEVQxHhBUlgJtgZI6wHYVYjS28ZLrMRqnLaW2FbXy00O9fsug8PyTvTpCadjtcci3fF5-fkB_M8lIJhxV3AK4ikk1z6YQmawM9NSD3IHrmITae13JBWwaWjFCwrlrdn-xzluyBwIwFkmDkd1h4zwwW8y1NtVfTyWFCSdB5m5jKHE5J54w6Ryq3AK0OkYluMlPeXFkFK0VCwUPmilkc2MlXnYTVvgFxC4rSYsYZJOGBm_nQfPFYtqS-R2h2fgEhcAXftz5drNfcCYuPaNO1cBQ"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc0708d9-a840-4604-9924-f4f2bc7c8833", "record_id": "flaws_cloudtrail:0000130:fc0708d9-a840-4604-9924-f4f2bc7c8833", "row_index": 130, "timestamp": "2019-06-13T12:35:38Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc0708d9-a840-4604-9924-f4f2bc7c8833", "eventTime": "2019-06-13T12:35:38Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs8GCShnpdYkiA__HSWfJdqkeBSXK9MXFUVg8XDkwRvsy1q_t_x6oEmr2MzXwoCyrc198ScdgjAhzyQliZ1G9m3FFEGzHnWJ6zdF6JGg7qSBx54HSQw-D9PAbWrz-jYyM4yj8Ub0GUaRfiIMZBmZMs2ZU26n7R2I2TXJw3dbjCb_bYmMH7u_Cnr2Eu-VWiCZNMY_2ma2AC4LMzTsu-08va8K6g76xkly4PMqIXuxneh19gaK-WErCmCnTxZ7-cuyps1Qr1Tj_JCC6m7Rg7z72t7IfKjbAI4NdcRLXtJ71EQVqSENhtpdok0r6Fo-oCXe35I2HM0XYS8jBPJFUtdQnjmsFtGgW60HP95C1HCCChrw5RdiVzxPJToduVyH5Zl5pE"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12e66dad-7340-42e7-bebc-0863235ee923", "record_id": "flaws_cloudtrail:0000131:12e66dad-7340-42e7-bebc-0863235ee923", "row_index": 131, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12e66dad-7340-42e7-bebc-0863235ee923", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuS00z4-LNP5tNvu58VavKgBLIAx5uQiRAV7YY9snkHzBKHWW7N7HVrVGnN3Z3i5Y0hbJ4CsAbZiuPSxtPmFulfGdo3OcMRzV0MpCUVU8QgRJc7qPwoUgvXvVEm89WzrnkLJZzZ8J7cu0xU7iEE3vVWX2wLMKgm4ON9i1YopQQEyGK00PhgMRrsn8KZ5t5aRFPrSG47wdaSueRIQ5nXFYT7tiwh0XXT1XFlpwjx0yi8l6tDttlGzNYTIBofF5M_CMOjO2CHnLk2rXENyWoysHuZeZiLNTgkjQGqOLDQlk_NRVQDhfzqr38xoR4zqmvkxxwYmuaf_PrVRHBCXjnhgYq18SNrd33XN3YDSpYDBjor7J6xabtreitQkm-2sPk_6zY"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a516dec-07e4-4b32-bdf6-74d10b912844", "record_id": "flaws_cloudtrail:0000132:8a516dec-07e4-4b32-bdf6-74d10b912844", "row_index": 132, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a516dec-07e4-4b32-bdf6-74d10b912844", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbv6jCMVqxxk3H0ZqWkJbY_vlYougg9nef716NRSShjtDYr2tP9cssBIInqD71HDf59_5Q2wSw3iXGCFVB7pqqxn7gSJdfWDMZ6-asBy3-pU_vuzUVyutAg2VYP2zntHwjQDymZ4gGb6b6NlgCthUDa1j_hAat7smkbuN9MtBiH0-0zOgVJN-ky1d5ZnJoobJ3jjqkP9Kh-lVDyYo34fGN45Cca8SauFI9dbb8z7OBZzPo24a1h9CcjPUi01ux0DobLYD9LCTibGR1HhY3yQ88p9OO_IueaF5HssSt8X-FKDAbFUd1reGcIqIjlX5aFVg9UTU0Mr700F7xGczjfcV-ChFMeqVC1zEkQhWuql-d5798wu_6r3e5pYRdO5ImMtzEw"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20bf98a2-4c67-4497-a96a-682293a0f10f", "record_id": "flaws_cloudtrail:0000133:20bf98a2-4c67-4497-a96a-682293a0f10f", "row_index": 133, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20bf98a2-4c67-4497-a96a-682293a0f10f", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbv6jCMVqxxk3H0ZqWkJbY_vDkLGov-R8HnFPWf3DHx9qy_0CG_Z7n0SJeD1JnJDFBLdJa7-HT4nZoUUZN234rZWT-HZjqvMfxNTxIRyW3VP2jwCPeiOAYJwQRI-wfmVkott4Feytr1BPK0mGvA_NDz2afbwuFo-1Cq0LvYouGGDaNA1XwNrArZqOJ7qBj1TYs18s49I1kjotfij8_XctaY0GguhxweblqIbiBziH8K2hyVTPaPlUZnhzExqK8ksuFvWJrFrhJiK1zoqOFhew-1tiYMKutTtrJzZKfSLi4SdhiLnUX6GqeOWucSqY-EaPUE3x85-j75eDOodhaSvdbbvInrvjQvuNtxzmtMoBgaMeonHJxCxCvAw3K2DzxkuLCA"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59362b-aa3b-43e9-b5f1-832e9ab4851e", "record_id": "flaws_cloudtrail:0000134:59362b-aa3b-43e9-b5f1-832e9ab4851e", "row_index": 134, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1246, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59362b-aa3b-43e9-b5f1-832e9ab4851e", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbv6jCMVqxxk3H0ZqWkJbY_vedNjZ5aWYpn6V0cLfDBov9ksWCMO0NzUjXJaHSrIVstr9_njJ8laZYjYQ69XMtvYOfoINtkBYJkpbTqkIjmT2Q8cnFsJ9RNIhbI5r_F9qMALddjEplz2Hx4yRqql8yWh_uFmKTgx-LKTmteobJMBW-xgfXB0gcaXYhvZuGYhF7jKVBbOgrip4dcc_eQ-fJgG1en6EWs3NWbv8wYq7uaa2wRUVF8OKuDfSujXGD5Kfwm9bD8UZeibrD6B-Mcr-FPwdXmTHRCEZM0zbSLMqVlDbIddPmNExgRcD-RkhB7uGnSySz0h60TRyG_HKz0yiim4Wr2cvBlofNZOEKk0xTRGxerm7QUdByOumZoQq4RHX3k"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12e66dad-7340-42e7-bebc-0863235ee923", "record_id": "flaws_cloudtrail:0000135:12e66dad-7340-42e7-bebc-0863235ee923", "row_index": 135, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12e66dad-7340-42e7-bebc-0863235ee923", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuS00z4-LNP5tNvu58VavKgBLIAx5uQiRAV7YY9snkHzBKHWW7N7HVrVGnN3Z3i5Y0hbJ4CsAbZiuPSxtPmFulfGdo3OcMRzV0MpCUVU8QgRJc7qPwoUgvXvVEm89WzrnkLJZzZ8J7cu0xU7iEE3vVWX2wLMKgm4ON9i1YopQQEyGK00PhgMRrsn8KZ5t5aRFPrSG47wdaSueRIQ5nXFYT7tiwh0XXT1XFlpwjx0yi8l6tDttlGzNYTIBofF5M_CMOjO2CHnLk2rXENyWoysHuZeZiLNTgkjQGqOLDQlk_NRVQDhfzqr38xoR4zqmvkxxwYmuaf_PrVRHBCXjnhgYq18SNrd33XN3YDSpYDBjor7J6xabtreitQkm-2sPk_6zY"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a516dec-07e4-4b32-bdf6-74d10b912844", "record_id": "flaws_cloudtrail:0000136:8a516dec-07e4-4b32-bdf6-74d10b912844", "row_index": 136, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a516dec-07e4-4b32-bdf6-74d10b912844", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbv6jCMVqxxk3H0ZqWkJbY_vlYougg9nef716NRSShjtDYr2tP9cssBIInqD71HDf59_5Q2wSw3iXGCFVB7pqqxn7gSJdfWDMZ6-asBy3-pU_vuzUVyutAg2VYP2zntHwjQDymZ4gGb6b6NlgCthUDa1j_hAat7smkbuN9MtBiH0-0zOgVJN-ky1d5ZnJoobJ3jjqkP9Kh-lVDyYo34fGN45Cca8SauFI9dbb8z7OBZzPo24a1h9CcjPUi01ux0DobLYD9LCTibGR1HhY3yQ88p9OO_IueaF5HssSt8X-FKDAbFUd1reGcIqIjlX5aFVg9UTU0Mr700F7xGczjfcV-ChFMeqVC1zEkQhWuql-d5798wu_6r3e5pYRdO5ImMtzEw"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20bf98a2-4c67-4497-a96a-682293a0f10f", "record_id": "flaws_cloudtrail:0000137:20bf98a2-4c67-4497-a96a-682293a0f10f", "row_index": 137, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20bf98a2-4c67-4497-a96a-682293a0f10f", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbv6jCMVqxxk3H0ZqWkJbY_vDkLGov-R8HnFPWf3DHx9qy_0CG_Z7n0SJeD1JnJDFBLdJa7-HT4nZoUUZN234rZWT-HZjqvMfxNTxIRyW3VP2jwCPeiOAYJwQRI-wfmVkott4Feytr1BPK0mGvA_NDz2afbwuFo-1Cq0LvYouGGDaNA1XwNrArZqOJ7qBj1TYs18s49I1kjotfij8_XctaY0GguhxweblqIbiBziH8K2hyVTPaPlUZnhzExqK8ksuFvWJrFrhJiK1zoqOFhew-1tiYMKutTtrJzZKfSLi4SdhiLnUX6GqeOWucSqY-EaPUE3x85-j75eDOodhaSvdbbvInrvjQvuNtxzmtMoBgaMeonHJxCxCvAw3K2DzxkuLCA"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59362b-aa3b-43e9-b5f1-832e9ab4851e", "record_id": "flaws_cloudtrail:0000138:59362b-aa3b-43e9-b5f1-832e9ab4851e", "row_index": 138, "timestamp": "2019-06-13T12:35:39Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1246, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59362b-aa3b-43e9-b5f1-832e9ab4851e", "eventTime": "2019-06-13T12:35:39Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbv6jCMVqxxk3H0ZqWkJbY_vedNjZ5aWYpn6V0cLfDBov9ksWCMO0NzUjXJaHSrIVstr9_njJ8laZYjYQ69XMtvYOfoINtkBYJkpbTqkIjmT2Q8cnFsJ9RNIhbI5r_F9qMALddjEplz2Hx4yRqql8yWh_uFmKTgx-LKTmteobJMBW-xgfXB0gcaXYhvZuGYhF7jKVBbOgrip4dcc_eQ-fJgG1en6EWs3NWbv8wYq7uaa2wRUVF8OKuDfSujXGD5Kfwm9bD8UZeibrD6B-Mcr-FPwdXmTHRCEZM0zbSLMqVlDbIddPmNExgRcD-RkhB7uGnSySz0h60TRyG_HKz0yiim4Wr2cvBlofNZOEKk0xTRGxerm7QUdByOumZoQq4RHX3k"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f177ae4-5248-49c1-932a-2eb30037984e", "record_id": "flaws_cloudtrail:0000139:8f177ae4-5248-49c1-932a-2eb30037984e", "row_index": 139, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f177ae4-5248-49c1-932a-2eb30037984e", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs6uYuK-urWsBeA5OrMq_Hg6JxOFMw8ThNvSJgiWmgOwm-dF3bTqXPiwRWfQuBGXi78UUCJUTq7SgD1rVdcr1KNTGW7Fd64aDF9lBFsrisUrQPHCrlBy7WHW_tP3HsnfaybKI6vjJnuykBd7eL-nD3dg2enkXs2Y5Z5nROj3aQd_Zh2_M9UFtzvRkWMioMrIUZ2v_YxfFeJdQPcVmx8yrmmP4kNyY7xqkQiszGxq-Kb8x-7dcVn5gNDXY_2q6ZxZY4jSrNEGeyLwPGuLiDNG5C1k7QP-Hy0pSGRS8J6KbJ_3jkX6nEB9lAdHlI_YhQpViaZQJ-H-gGB2gtELfSm4zOvgugk6m0ESVv_kqhdIfxvA-2SJwl8054LesXNQQ_-_1U"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcf01d4-940e-45e4-996f-469651c2aeda", "record_id": "flaws_cloudtrail:0000140:efcf01d4-940e-45e4-996f-469651c2aeda", "row_index": 140, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcf01d4-940e-45e4-996f-469651c2aeda", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs1NK_eJbo8VdAvQQdV8dfv5Yy_GLw-mhULMv35NfcWhQbTvs9ESkBfAXu_VKC7NWV7n8B9fjiIocQFDTuEOQd9hxfIG0fJKgbTc0vZefcL-vuDWaQtvjaIwA_YR65lyVoogPU2Z7lEsxzLiwN32k4WcjcyoclA2uDMypGkw8Zuf7c6n1kyQBIHSF06m9Y7siDTDN_A4-ahEKO3rC9Wxj4woMBNrXDyHUWxYuw3MOMphOJwe2OrsoSGbFC1cNXiySd-8-4Sg--Ml5Tv4OqvASfPczMGpGRCH3LaRV9kKWq4T1oNtXoiFKIIc7mL5fIX-dpsHZmsnztU21qWdqBJSSz6h4Wgf7Y1KyHHBrO5aSmshbg6T4M1Z73hx7l0iu7vbRM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7761bb9c-878a-44d2-bc82-849f04ec88f0", "record_id": "flaws_cloudtrail:0000141:7761bb9c-878a-44d2-bc82-849f04ec88f0", "row_index": 141, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7761bb9c-878a-44d2-bc82-849f04ec88f0", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuDXaOAiX7Zvw9NH5n4hkTAAQIk3LYK-RKlCYxCPmwtaLX4WcdWrJ4iw2GMf46JQwwdlQs_oHbmUJX3BS-eLFSc-mRVOUdDUB3--zzowZjJWNb71VpD5yFbcKZMqFFFAuaMt-3swpBOhG05W4h0eJ2uBM8SJ0bTMWwbYiJB927HnMowQixBKtUFWb3R3THLOD_RaEC1kzMBQZRp0Gj75fVI2ZvMSqUuL1ILPbdhArlRsB3UKdZwyWr6gCAcrUCbsUbzaihXOwreEUKBCEO1ypHOkWSmFfA3TeMympIp5EhlOQeWzjEzO4PR4qVxUZQe5C5CT_QzIRdQRHdaxTS_A5sNX06Ll95ERsil0uN1cdm0pnR2Kt7-877I880Xs4-k-2M"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fa5e65d-1824-401d-b4b7-d83b35efe113", "record_id": "flaws_cloudtrail:0000142:2fa5e65d-1824-401d-b4b7-d83b35efe113", "row_index": 142, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fa5e65d-1824-401d-b4b7-d83b35efe113", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuDXaOAiX7Zvw9NH5n4hkTAJuUZC70kWJpkeglwMAp6SourU9QCFTzfK8gsJWTNl89hNY8PQ99Fe9daGTMxo4kwUMcQXoHYHwXoA6csmL6XhTbOt0jszJrkkO0t6Wbaqa0vMpUMHdGz44Hot5pXyLhU5Vs0KnfPMz_BWXJG-fbOOcST2OwOydvQDPLBI2iKIlGNPRUTnnb9gu6eRSaHmOTK3vpZwVIPcQk0K6wsj9nQtlWYnzheTeiP8P7Di7rj-8gSuC1JFzSeOrrrl7gfQQoKfc2zlDgosHdsFhF5bBgrIFCkxAMZaj-4MtX1MWLeIliGb62cLI765fBdIv17mNIWBBBsYeJOMAaPeQ2ASsj63VRoI6DDmZe0ETRTkroTcds"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0173cd0d-584a-47bf-a113-49cc0ff245f4", "record_id": "flaws_cloudtrail:0000143:0173cd0d-584a-47bf-a113-49cc0ff245f4", "row_index": 143, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0173cd0d-584a-47bf-a113-49cc0ff245f4", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs6uYuK-urWsBeA5OrMq_Hg1T2eUdfDkZBsAQU_qou_Lu0sUxTC4PTLkMXfYfxu_NAhYQ3S_QnfRs-Dtzkr8DjHJl8aRZ_cN97wJYkCN5lXD4wW75Mv2c_cYHl9B_uVTLQhqwd786xpm66D9wTqTm-izmkhslWp-lEpYs9ceo-NUD1yYLt8qgmTJa_uBmjCbqwRxL8s2ZWSLZrtDMtepflD0z08uPSbxUZc5n_VPCOzUephEur4yqOeVIolBbA_EaC07uLsN063Vq35k1NRimn6M77VxUno2SjnzrJw4hVhNq37s9yfEOP4WnlyLDzp0ELklUx_E7K3uuwaKPnDN9gAcFU8TcKuVsTeHMPOTVD_dN04GzYBheRwlKE-8KqXKDM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f177ae4-5248-49c1-932a-2eb30037984e", "record_id": "flaws_cloudtrail:0000144:8f177ae4-5248-49c1-932a-2eb30037984e", "row_index": 144, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f177ae4-5248-49c1-932a-2eb30037984e", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs6uYuK-urWsBeA5OrMq_Hg6JxOFMw8ThNvSJgiWmgOwm-dF3bTqXPiwRWfQuBGXi78UUCJUTq7SgD1rVdcr1KNTGW7Fd64aDF9lBFsrisUrQPHCrlBy7WHW_tP3HsnfaybKI6vjJnuykBd7eL-nD3dg2enkXs2Y5Z5nROj3aQd_Zh2_M9UFtzvRkWMioMrIUZ2v_YxfFeJdQPcVmx8yrmmP4kNyY7xqkQiszGxq-Kb8x-7dcVn5gNDXY_2q6ZxZY4jSrNEGeyLwPGuLiDNG5C1k7QP-Hy0pSGRS8J6KbJ_3jkX6nEB9lAdHlI_YhQpViaZQJ-H-gGB2gtELfSm4zOvgugk6m0ESVv_kqhdIfxvA-2SJwl8054LesXNQQ_-_1U"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcf01d4-940e-45e4-996f-469651c2aeda", "record_id": "flaws_cloudtrail:0000145:efcf01d4-940e-45e4-996f-469651c2aeda", "row_index": 145, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcf01d4-940e-45e4-996f-469651c2aeda", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs1NK_eJbo8VdAvQQdV8dfv5Yy_GLw-mhULMv35NfcWhQbTvs9ESkBfAXu_VKC7NWV7n8B9fjiIocQFDTuEOQd9hxfIG0fJKgbTc0vZefcL-vuDWaQtvjaIwA_YR65lyVoogPU2Z7lEsxzLiwN32k4WcjcyoclA2uDMypGkw8Zuf7c6n1kyQBIHSF06m9Y7siDTDN_A4-ahEKO3rC9Wxj4woMBNrXDyHUWxYuw3MOMphOJwe2OrsoSGbFC1cNXiySd-8-4Sg--Ml5Tv4OqvASfPczMGpGRCH3LaRV9kKWq4T1oNtXoiFKIIc7mL5fIX-dpsHZmsnztU21qWdqBJSSz6h4Wgf7Y1KyHHBrO5aSmshbg6T4M1Z73hx7l0iu7vbRM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7761bb9c-878a-44d2-bc82-849f04ec88f0", "record_id": "flaws_cloudtrail:0000146:7761bb9c-878a-44d2-bc82-849f04ec88f0", "row_index": 146, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7761bb9c-878a-44d2-bc82-849f04ec88f0", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuDXaOAiX7Zvw9NH5n4hkTAAQIk3LYK-RKlCYxCPmwtaLX4WcdWrJ4iw2GMf46JQwwdlQs_oHbmUJX3BS-eLFSc-mRVOUdDUB3--zzowZjJWNb71VpD5yFbcKZMqFFFAuaMt-3swpBOhG05W4h0eJ2uBM8SJ0bTMWwbYiJB927HnMowQixBKtUFWb3R3THLOD_RaEC1kzMBQZRp0Gj75fVI2ZvMSqUuL1ILPbdhArlRsB3UKdZwyWr6gCAcrUCbsUbzaihXOwreEUKBCEO1ypHOkWSmFfA3TeMympIp5EhlOQeWzjEzO4PR4qVxUZQe5C5CT_QzIRdQRHdaxTS_A5sNX06Ll95ERsil0uN1cdm0pnR2Kt7-877I880Xs4-k-2M"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fa5e65d-1824-401d-b4b7-d83b35efe113", "record_id": "flaws_cloudtrail:0000147:2fa5e65d-1824-401d-b4b7-d83b35efe113", "row_index": 147, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fa5e65d-1824-401d-b4b7-d83b35efe113", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuDXaOAiX7Zvw9NH5n4hkTAJuUZC70kWJpkeglwMAp6SourU9QCFTzfK8gsJWTNl89hNY8PQ99Fe9daGTMxo4kwUMcQXoHYHwXoA6csmL6XhTbOt0jszJrkkO0t6Wbaqa0vMpUMHdGz44Hot5pXyLhU5Vs0KnfPMz_BWXJG-fbOOcST2OwOydvQDPLBI2iKIlGNPRUTnnb9gu6eRSaHmOTK3vpZwVIPcQk0K6wsj9nQtlWYnzheTeiP8P7Di7rj-8gSuC1JFzSeOrrrl7gfQQoKfc2zlDgosHdsFhF5bBgrIFCkxAMZaj-4MtX1MWLeIliGb62cLI765fBdIv17mNIWBBBsYeJOMAaPeQ2ASsj63VRoI6DDmZe0ETRTkroTcds"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0173cd0d-584a-47bf-a113-49cc0ff245f4", "record_id": "flaws_cloudtrail:0000148:0173cd0d-584a-47bf-a113-49cc0ff245f4", "row_index": 148, "timestamp": "2019-06-13T12:35:40Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0173cd0d-584a-47bf-a113-49cc0ff245f4", "eventTime": "2019-06-13T12:35:40Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbs6uYuK-urWsBeA5OrMq_Hg1T2eUdfDkZBsAQU_qou_Lu0sUxTC4PTLkMXfYfxu_NAhYQ3S_QnfRs-Dtzkr8DjHJl8aRZ_cN97wJYkCN5lXD4wW75Mv2c_cYHl9B_uVTLQhqwd786xpm66D9wTqTm-izmkhslWp-lEpYs9ceo-NUD1yYLt8qgmTJa_uBmjCbqwRxL8s2ZWSLZrtDMtepflD0z08uPSbxUZc5n_VPCOzUephEur4yqOeVIolBbA_EaC07uLsN063Vq35k1NRimn6M77VxUno2SjnzrJw4hVhNq37s9yfEOP4WnlyLDzp0ELklUx_E7K3uuwaKPnDN9gAcFU8TcKuVsTeHMPOTVD_dN04GzYBheRwlKE-8KqXKDM"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258b3adb-a203-4c24-aa33-61a633f55c7e", "record_id": "flaws_cloudtrail:0000149:258b3adb-a203-4c24-aa33-61a633f55c7e", "row_index": 149, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258b3adb-a203-4c24-aa33-61a633f55c7e", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbsrh2C4gRcJOnZCfncaxstpnapSRyVN0i44PZn_q1s4so7SraSEH-aqLKHK6RR3v4EQHwD3j--MSYn5pYDzvAqsEa9qFi_MfcD2s-tdjPXj1wgII-bqdswBC2-Z8BnRu80jtfFcMNFzH7UlXaQFU1SnPDALAXHk0pOSAAHbOMzUaREj-lPIJaXpoM9ZoYEKlZs5oM-loNAYxDvWClLbFSM-3uFPMcXiF18M4khy11ykdIVUxN9rh7AKT5YIXm0GuWdKdp7NDPueicnXVfAtEXm9gPDTgsP1WWV9Vy1eovsB4h8KkMFNrguUzjsYXr0sO1lrp0j3cq2ifHNpCVMgnQ1XEEsrijT92iu8YD8bYHnXa1AMjqe8-lMpo57rDBWFXfA"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58a9caf8-5d5b-47e6-aa9e-7698b88c918d", "record_id": "flaws_cloudtrail:0000150:58a9caf8-5d5b-47e6-aa9e-7698b88c918d", "row_index": 150, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58a9caf8-5d5b-47e6-aa9e-7698b88c918d", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbtGn6K3JXfEXSm8wU7HINA5FmMM5B6IuAnARVHXR3I75uX6ngtJfLZ01_-BgOt7kxfowtRNPPP_mFs7M9Yd6rTcTDgme450C1jZ2eItocoWPfmJaqC9z1WCwIFP7trdEdzn-9rSZF4LP7zvge4hwhSlsC0z6FaQVKqsGhT3eun4lsDMx9zZ90uiNIi6qgqIb7vWfo-2OGBOqBKZXwe-KqBpA-IzFmI8deQZCKvJYjNATDb20ZOglEuoKCHXvjNN6yz3Hthol2ZVlZXu4NcY8OxCBWLmJiAxBL9SkUa0OE_MEcRh6TwTXeGNohE_F0prXow7wkJrFF-hBMi9UKvXUS47gd6LeNelnREfgcexmb0eN29x0Zhl38fxO4yYvXJClOo"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d77d69de-3376-4336-917c-e46c6653f174", "record_id": "flaws_cloudtrail:0000151:d77d69de-3376-4336-917c-e46c6653f174", "row_index": 151, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d77d69de-3376-4336-917c-e46c6653f174", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuKLd6GRF__LJoc18-b5UfkjzSDgq6XajBz2rDvqNckPp8JdxAD8w7IfVJSPYNO28JC97jFtVO0BI3i4EV5VADP4NL3Q48UGzljOwWODfuSZ059CWttZ8J-Zeuak9O4kKfBA3XEBIwAxnvl2z5StRbVqsxcqQp48bnibk6RYCpoxlEPQSrBV35u3CjDGqCMrjvpiPL85X3_HElAMIcShGRq7CPQEhN05KBj4I7-8rcREIvrotkBoetICGHH6xRcycfUzqMEmNrXtNDHeuI6ejgrK96my-dJqtjGPLni0adaauMY67pibIQt1Kh13JJU7D7Fd144E4x_3RqZ_xShtxpqNM-cbtNvXROXdlH93Z64WPmkS7rO8TbDkJ7zeL_BxTY"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d919e994-7035-455d-87b5-e053edd273172", "record_id": "flaws_cloudtrail:0000152:d919e994-7035-455d-87b5-e053edd273172", "row_index": 152, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d919e994-7035-455d-87b5-e053edd273172", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbun6lTwHQ0_amaXiv76Wkuiqh7IZH8lJKVWQNbR5mRwzK1FIAF2WnAJXdUNs6plPwkw6q4Gf0UJOqkrVw5x12JALdGcZSDBQXnVoybkCmPPAai_bBUNdasJ3LuSCOYIS6RidjBX5h4cpZLhL284haMaEJDS3iq0w6TGHJmz_OUXjvvR8u_nCC6uX2SMj2301czu1foTuyhTlczMC3J3T1iedQx5P5cJ9CMLhiCxFZXmCGDGDG2b0P3Y380VOfrqjiPMlOMqZzjvhxMhmxdVNXMeTSHIHo266Ur-EvoY81q-2eOVAO7GfEK89J_tsU-ZlMpbVkwQhfDGArhs7d9iJdofqQo6EshQzSfIQoTWXYS1TL_KEi1kXhCOCd57W7FHLnk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051358a-c1d7-4e37-833f-df4c2819a8f7", "record_id": "flaws_cloudtrail:0000153:051358a-c1d7-4e37-833f-df4c2819a8f7", "row_index": 153, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1247, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051358a-c1d7-4e37-833f-df4c2819a8f7", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuKLd6GRF__LJoc18-b5Ufk6NlPH-9hIZM4YYvVkjIMdzCCFSbrFuKw3d2BJcPLgXJfWfqxbU_bzJGNlxsLRV_2jO1VRF0oC9YWDVfNoYMQNn9pyAorI0TBoWb3qNLWJLm0SdZn0gkfj0wHFWtmnQLztXTQD3yZ27QI0NWnVF83fK6iiwKfhOVgyh3-qG1cxfZUUTeX7NDLJC258w7Kf1blCp7tQRHKfLpi8Is1W2K2VXM-5pjsPSUf0eN2BCcITX2spKX6SPq50iF21KY4T_Wawn8lKUfIvrHH1r1VGkC8YH2fv5oihBFcB9csnQ-8bm0rPsk0g6pWGF0S9yP8nLVAWoVCzAQrVpLiSr8s2hsxI-fENZKQPL8QkDmEWg5vPLg"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258b3adb-a203-4c24-aa33-61a633f55c7e", "record_id": "flaws_cloudtrail:0000154:258b3adb-a203-4c24-aa33-61a633f55c7e", "row_index": 154, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258b3adb-a203-4c24-aa33-61a633f55c7e", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbsrh2C4gRcJOnZCfncaxstpnapSRyVN0i44PZn_q1s4so7SraSEH-aqLKHK6RR3v4EQHwD3j--MSYn5pYDzvAqsEa9qFi_MfcD2s-tdjPXj1wgII-bqdswBC2-Z8BnRu80jtfFcMNFzH7UlXaQFU1SnPDALAXHk0pOSAAHbOMzUaREj-lPIJaXpoM9ZoYEKlZs5oM-loNAYxDvWClLbFSM-3uFPMcXiF18M4khy11ykdIVUxN9rh7AKT5YIXm0GuWdKdp7NDPueicnXVfAtEXm9gPDTgsP1WWV9Vy1eovsB4h8KkMFNrguUzjsYXr0sO1lrp0j3cq2ifHNpCVMgnQ1XEEsrijT92iu8YD8bYHnXa1AMjqe8-lMpo57rDBWFXfA"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58a9caf8-5d5b-47e6-aa9e-7698b88c918d", "record_id": "flaws_cloudtrail:0000155:58a9caf8-5d5b-47e6-aa9e-7698b88c918d", "row_index": 155, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58a9caf8-5d5b-47e6-aa9e-7698b88c918d", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbtGn6K3JXfEXSm8wU7HINA5FmMM5B6IuAnARVHXR3I75uX6ngtJfLZ01_-BgOt7kxfowtRNPPP_mFs7M9Yd6rTcTDgme450C1jZ2eItocoWPfmJaqC9z1WCwIFP7trdEdzn-9rSZF4LP7zvge4hwhSlsC0z6FaQVKqsGhT3eun4lsDMx9zZ90uiNIi6qgqIb7vWfo-2OGBOqBKZXwe-KqBpA-IzFmI8deQZCKvJYjNATDb20ZOglEuoKCHXvjNN6yz3Hthol2ZVlZXu4NcY8OxCBWLmJiAxBL9SkUa0OE_MEcRh6TwTXeGNohE_F0prXow7wkJrFF-hBMi9UKvXUS47gd6LeNelnREfgcexmb0eN29x0Zhl38fxO4yYvXJClOo"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d77d69de-3376-4336-917c-e46c6653f174", "record_id": "flaws_cloudtrail:0000156:d77d69de-3376-4336-917c-e46c6653f174", "row_index": 156, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1248, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d77d69de-3376-4336-917c-e46c6653f174", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuKLd6GRF__LJoc18-b5UfkjzSDgq6XajBz2rDvqNckPp8JdxAD8w7IfVJSPYNO28JC97jFtVO0BI3i4EV5VADP4NL3Q48UGzljOwWODfuSZ059CWttZ8J-Zeuak9O4kKfBA3XEBIwAxnvl2z5StRbVqsxcqQp48bnibk6RYCpoxlEPQSrBV35u3CjDGqCMrjvpiPL85X3_HElAMIcShGRq7CPQEhN05KBj4I7-8rcREIvrotkBoetICGHH6xRcycfUzqMEmNrXtNDHeuI6ejgrK96my-dJqtjGPLni0adaauMY67pibIQt1Kh13JJU7D7Fd144E4x_3RqZ_xShtxpqNM-cbtNvXROXdlH93Z64WPmkS7rO8TbDkJ7zeL_BxTY"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d919e994-7035-455d-87b5-e053edd273172", "record_id": "flaws_cloudtrail:0000157:d919e994-7035-455d-87b5-e053edd273172", "row_index": 157, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1249, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d919e994-7035-455d-87b5-e053edd273172", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbun6lTwHQ0_amaXiv76Wkuiqh7IZH8lJKVWQNbR5mRwzK1FIAF2WnAJXdUNs6plPwkw6q4Gf0UJOqkrVw5x12JALdGcZSDBQXnVoybkCmPPAai_bBUNdasJ3LuSCOYIS6RidjBX5h4cpZLhL284haMaEJDS3iq0w6TGHJmz_OUXjvvR8u_nCC6uX2SMj2301czu1foTuyhTlczMC3J3T1iedQx5P5cJ9CMLhiCxFZXmCGDGDG2b0P3Y380VOfrqjiPMlOMqZzjvhxMhmxdVNXMeTSHIHo266Ur-EvoY81q-2eOVAO7GfEK89J_tsU-ZlMpbVkwQhfDGArhs7d9iJdofqQo6EshQzSfIQoTWXYS1TL_KEi1kXhCOCd57W7FHLnk"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051358a-c1d7-4e37-833f-df4c2819a8f7", "record_id": "flaws_cloudtrail:0000158:051358a-c1d7-4e37-833f-df4c2819a8f7", "row_index": 158, "timestamp": "2019-06-13T12:35:41Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1247, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051358a-c1d7-4e37-833f-df4c2819a8f7", "eventTime": "2019-06-13T12:35:41Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "nextToken": "Kwfr0bfVKkYk4OrYazFRicTWtHeluRQuX3R0PVMrDkVh6H_NV5NfUR1bCADplmfKbeCtAlR9rx5Uv105MyoEDRWM4XCR7sodZYrDPdfDEbuKLd6GRF__LJoc18-b5Ufk6NlPH-9hIZM4YYvVkjIMdzCCFSbrFuKw3d2BJcPLgXJfWfqxbU_bzJGNlxsLRV_2jO1VRF0oC9YWDVfNoYMQNn9pyAorI0TBoWb3qNLWJLm0SdZn0gkfj0wHFWtmnQLztXTQD3yZ27QI0NWnVF83fK6iiwKfhOVgyh3-qG1cxfZUUTeX7NDLJC258w7Kf1blCp7tQRHKfLpi8Is1W2K2VXM-5pjsPSUf0eN2BCcITX2spKX6SPq50iF21KY4T_Wawn8lKUfIvrHH1r1VGkC8YH2fv5oihBFcB9csnQ-8bm0rPsk0g6pWGF0S9yP8nLVAWoVCzAQrVpLiSr8s2hsxI-fENZKQPL8QkDmEWg5vPLg"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac6e219-b88d-4844-bc81-41d7d1688b4a", "record_id": "flaws_cloudtrail:0000159:5ac6e219-b88d-4844-bc81-41d7d1688b4a", "row_index": 159, "timestamp": "2019-06-13T12:36:10Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac6e219-b88d-4844-bc81-41d7d1688b4a", "eventTime": "2019-06-13T12:36:10Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac6e219-b88d-4844-bc81-41d7d1688b4a", "record_id": "flaws_cloudtrail:0000160:5ac6e219-b88d-4844-bc81-41d7d1688b4a", "row_index": 160, "timestamp": "2019-06-13T12:36:10Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac6e219-b88d-4844-bc81-41d7d1688b4a", "eventTime": "2019-06-13T12:36:10Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98d09c68-cfcf-421c-8113-6dcbd56bd0b4", "record_id": "flaws_cloudtrail:0000161:98d09c68-cfcf-421c-8113-6dcbd56bd0b4", "row_index": 161, "timestamp": "2019-06-13T12:36:20Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98d09c68-cfcf-421c-8113-6dcbd56bd0b4", "eventTime": "2019-06-13T12:36:20Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/level6-ec1335a148b902503664e2d162fcdaa98c224ea5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98d09c68-cfcf-421c-8113-6dcbd56bd0b4", "record_id": "flaws_cloudtrail:0000162:98d09c68-cfcf-421c-8113-6dcbd56bd0b4", "row_index": 162, "timestamp": "2019-06-13T12:36:20Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98d09c68-cfcf-421c-8113-6dcbd56bd0b4", "eventTime": "2019-06-13T12:36:20Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/level6-ec1335a148b902503664e2d162fcdaa98c224ea5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a458826f6-a167-47ed-93fe-9b961b183fbf", "record_id": "flaws_cloudtrail:0000163:a458826f6-a167-47ed-93fe-9b961b183fbf", "row_index": 163, "timestamp": "2019-06-13T12:37:24Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a458826f6-a167-47ed-93fe-9b961b183fbf", "eventTime": "2019-06-13T12:37:24Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a458826f6-a167-47ed-93fe-9b961b183fbf", "record_id": "flaws_cloudtrail:0000164:a458826f6-a167-47ed-93fe-9b961b183fbf", "row_index": 164, "timestamp": "2019-06-13T12:37:24Z", "event_type": "DescribeLogStreams", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a458826f6-a167-47ed-93fe-9b961b183fbf", "eventTime": "2019-06-13T12:37:24Z", "eventName": "DescribeLogStreams", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logGroupName": "/aws/lambda/level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8ac9b0-5684-4e32-bfd6-a95bb41d8b6b", "record_id": "flaws_cloudtrail:0000165:af8ac9b0-5684-4e32-bfd6-a95bb41d8b6b", "row_index": 165, "timestamp": "2019-06-13T12:38:08Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8ac9b0-5684-4e32-bfd6-a95bb41d8b6b", "eventTime": "2019-06-13T12:38:08Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8ac9b0-5684-4e32-bfd6-a95bb41d8b6b", "record_id": "flaws_cloudtrail:0000166:af8ac9b0-5684-4e32-bfd6-a95bb41d8b6b", "row_index": 166, "timestamp": "2019-06-13T12:38:08Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8ac9b0-5684-4e32-bfd6-a95bb41d8b6b", "eventTime": "2019-06-13T12:38:08Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06d47c7-92fe-4798-9e9a-6b71376b9ffd", "record_id": "flaws_cloudtrail:0000167:d06d47c7-92fe-4798-9e9a-6b71376b9ffd", "row_index": 167, "timestamp": "2019-06-13T12:39:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06d47c7-92fe-4798-9e9a-6b71376b9ffd", "eventTime": "2019-06-13T12:39:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06d47c7-92fe-4798-9e9a-6b71376b9ffd", "record_id": "flaws_cloudtrail:0000168:d06d47c7-92fe-4798-9e9a-6b71376b9ffd", "row_index": 168, "timestamp": "2019-06-13T12:39:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06d47c7-92fe-4798-9e9a-6b71376b9ffd", "eventTime": "2019-06-13T12:39:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c673cf55-b8d5-458b-9b40-904e325977b0", "record_id": "flaws_cloudtrail:0000169:c673cf55-b8d5-458b-9b40-904e325977b0", "row_index": 169, "timestamp": "2019-06-13T12:40:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c673cf55-b8d5-458b-9b40-904e325977b0", "eventTime": "2019-06-13T12:40:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c673cf55-b8d5-458b-9b40-904e325977b0", "record_id": "flaws_cloudtrail:0000170:c673cf55-b8d5-458b-9b40-904e325977b0", "row_index": 170, "timestamp": "2019-06-13T12:40:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c673cf55-b8d5-458b-9b40-904e325977b0", "eventTime": "2019-06-13T12:40:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf85eca0-1315-437c-a809-64ab2a4d38cc", "record_id": "flaws_cloudtrail:0000171:cf85eca0-1315-437c-a809-64ab2a4d38cc", "row_index": 171, "timestamp": "2019-06-13T12:41:09Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf85eca0-1315-437c-a809-64ab2a4d38cc", "eventTime": "2019-06-13T12:41:09Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf85eca0-1315-437c-a809-64ab2a4d38cc", "record_id": "flaws_cloudtrail:0000172:cf85eca0-1315-437c-a809-64ab2a4d38cc", "row_index": 172, "timestamp": "2019-06-13T12:41:09Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf85eca0-1315-437c-a809-64ab2a4d38cc", "eventTime": "2019-06-13T12:41:09Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b4c5de-3718-4c89-a5fd-637d67012efd", "record_id": "flaws_cloudtrail:0000173:05b4c5de-3718-4c89-a5fd-637d67012efd", "row_index": 173, "timestamp": "2019-06-13T12:41:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b4c5de-3718-4c89-a5fd-637d67012efd", "eventTime": "2019-06-13T12:41:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b4c5de-3718-4c89-a5fd-637d67012efd", "record_id": "flaws_cloudtrail:0000174:05b4c5de-3718-4c89-a5fd-637d67012efd", "row_index": 174, "timestamp": "2019-06-13T12:41:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b4c5de-3718-4c89-a5fd-637d67012efd", "eventTime": "2019-06-13T12:41:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9ed0dd-cc15-403a-b82a-f7a3e609ba4d", "record_id": "flaws_cloudtrail:0000175:0e9ed0dd-cc15-403a-b82a-f7a3e609ba4d", "row_index": 175, "timestamp": "2019-06-13T12:44:09Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9ed0dd-cc15-403a-b82a-f7a3e609ba4d", "eventTime": "2019-06-13T12:44:09Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9ed0dd-cc15-403a-b82a-f7a3e609ba4d", "record_id": "flaws_cloudtrail:0000176:0e9ed0dd-cc15-403a-b82a-f7a3e609ba4d", "row_index": 176, "timestamp": "2019-06-13T12:44:09Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9ed0dd-cc15-403a-b82a-f7a3e609ba4d", "eventTime": "2019-06-13T12:44:09Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d290dab4-e0bc-4156-bee3-af75ae40db79", "record_id": "flaws_cloudtrail:0000177:d290dab4-e0bc-4156-bee3-af75ae40db79", "row_index": 177, "timestamp": "2019-06-13T12:48:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d290dab4-e0bc-4156-bee3-af75ae40db79", "eventTime": "2019-06-13T12:48:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d290dab4-e0bc-4156-bee3-af75ae40db79", "record_id": "flaws_cloudtrail:0000178:d290dab4-e0bc-4156-bee3-af75ae40db79", "row_index": 178, "timestamp": "2019-06-13T12:48:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d290dab4-e0bc-4156-bee3-af75ae40db79", "eventTime": "2019-06-13T12:48:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b459090-743c-4915-b6d3-49236e9", "record_id": "flaws_cloudtrail:0000179:b459090-743c-4915-b6d3-49236e9", "row_index": 179, "timestamp": "2019-06-13T12:49:35Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b459090-743c-4915-b6d3-49236e9", "eventTime": "2019-06-13T12:49:35Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b459090-743c-4915-b6d3-49236e9", "record_id": "flaws_cloudtrail:0000180:b459090-743c-4915-b6d3-49236e9", "row_index": 180, "timestamp": "2019-06-13T12:49:35Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b459090-743c-4915-b6d3-49236e9", "eventTime": "2019-06-13T12:49:35Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a6d3d7b-0661-4bd9-b78f-ef9449f90c0f", "record_id": "flaws_cloudtrail:0000181:6a6d3d7b-0661-4bd9-b78f-ef9449f90c0f", "row_index": 181, "timestamp": "2019-06-13T12:50:49Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a6d3d7b-0661-4bd9-b78f-ef9449f90c0f", "eventTime": "2019-06-13T12:50:49Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a6d3d7b-0661-4bd9-b78f-ef9449f90c0f", "record_id": "flaws_cloudtrail:0000182:6a6d3d7b-0661-4bd9-b78f-ef9449f90c0f", "row_index": 182, "timestamp": "2019-06-13T12:50:49Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a6d3d7b-0661-4bd9-b78f-ef9449f90c0f", "eventTime": "2019-06-13T12:50:49Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe49d2c-f6e5-4953-b126-503e89ac762f", "record_id": "flaws_cloudtrail:0000183:3fe49d2c-f6e5-4953-b126-503e89ac762f", "row_index": 183, "timestamp": "2019-06-13T12:51:52Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe49d2c-f6e5-4953-b126-503e89ac762f", "eventTime": "2019-06-13T12:51:52Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe49d2c-f6e5-4953-b126-503e89ac762f", "record_id": "flaws_cloudtrail:0000184:3fe49d2c-f6e5-4953-b126-503e89ac762f", "row_index": 184, "timestamp": "2019-06-13T12:51:52Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe49d2c-f6e5-4953-b126-503e89ac762f", "eventTime": "2019-06-13T12:51:52Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e37599-b625-4fe5-901c-1196518b995f", "record_id": "flaws_cloudtrail:0000185:7e37599-b625-4fe5-901c-1196518b995f", "row_index": 185, "timestamp": "2019-06-13T12:53:49Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e37599-b625-4fe5-901c-1196518b995f", "eventTime": "2019-06-13T12:53:49Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"deploymentId": "8gppiv", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e37599-b625-4fe5-901c-1196518b995f", "record_id": "flaws_cloudtrail:0000186:7e37599-b625-4fe5-901c-1196518b995f", "row_index": 186, "timestamp": "2019-06-13T12:53:49Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e37599-b625-4fe5-901c-1196518b995f", "eventTime": "2019-06-13T12:53:49Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"deploymentId": "8gppiv", "restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08bbec16-827d-4fea-801c-33ff6c3f633a", "record_id": "flaws_cloudtrail:0000187:08bbec16-827d-4fea-801c-33ff6c3f633a", "row_index": 187, "timestamp": "2019-06-13T13:07:16Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08bbec16-827d-4fea-801c-33ff6c3f633a", "eventTime": "2019-06-13T13:07:16Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:2rfismmoo8", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "2rfismmoo8", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08bbec16-827d-4fea-801c-33ff6c3f633a", "record_id": "flaws_cloudtrail:0000188:08bbec16-827d-4fea-801c-33ff6c3f633a", "row_index": 188, "timestamp": "2019-06-13T13:07:16Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08bbec16-827d-4fea-801c-33ff6c3f633a", "eventTime": "2019-06-13T13:07:16Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:2rfismmoo8", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "2rfismmoo8", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a29c370-9c7e-4afc-b430-6c15f6f541e4", "record_id": "flaws_cloudtrail:0000189:2a29c370-9c7e-4afc-b430-6c15f6f541e4", "row_index": 189, "timestamp": "2019-06-13T13:07:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a29c370-9c7e-4afc-b430-6c15f6f541e4", "eventTime": "2019-06-13T13:07:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis/2rfismmoo8/stages", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a29c370-9c7e-4afc-b430-6c15f6f541e4", "record_id": "flaws_cloudtrail:0000190:2a29c370-9c7e-4afc-b430-6c15f6f541e4", "row_index": 190, "timestamp": "2019-06-13T13:07:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a29c370-9c7e-4afc-b430-6c15f6f541e4", "eventTime": "2019-06-13T13:07:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis/2rfismmoo8/stages", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47128-4ac4-4948-9497-640e298f006d", "record_id": "flaws_cloudtrail:0000191:a47128-4ac4-4948-9497-640e298f006d", "row_index": 191, "timestamp": "2019-06-13T13:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47128-4ac4-4948-9497-640e298f006d", "eventTime": "2019-06-13T13:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGR6TDD5UEXMON2VM", "expiration": "Jun 13, 2019 7:54:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47128-4ac4-4948-9497-640e298f006d", "record_id": "flaws_cloudtrail:0000192:a47128-4ac4-4948-9497-640e298f006d", "row_index": 192, "timestamp": "2019-06-13T13:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47128-4ac4-4948-9497-640e298f006d", "eventTime": "2019-06-13T13:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGR6TDD5UEXMON2VM", "expiration": "Jun 13, 2019 7:54:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b53603-a7b6-4672-ae73-faa6c14c5e9b", "record_id": "flaws_cloudtrail:0000193:4b53603-a7b6-4672-ae73-faa6c14c5e9b", "row_index": 193, "timestamp": "2019-06-13T14:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b53603-a7b6-4672-ae73-faa6c14c5e9b", "eventTime": "2019-06-13T14:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVXDZD6WRJR3NIDIJ", "expiration": "Jun 13, 2019 8:43:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b53603-a7b6-4672-ae73-faa6c14c5e9b", "record_id": "flaws_cloudtrail:0000194:4b53603-a7b6-4672-ae73-faa6c14c5e9b", "row_index": 194, "timestamp": "2019-06-13T14:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b53603-a7b6-4672-ae73-faa6c14c5e9b", "eventTime": "2019-06-13T14:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVXDZD6WRJR3NIDIJ", "expiration": "Jun 13, 2019 8:43:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca85d8f-6e3b-41a4-8d73-833969367818", "record_id": "flaws_cloudtrail:0000195:bca85d8f-6e3b-41a4-8d73-833969367818", "row_index": 195, "timestamp": "2019-06-13T15:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca85d8f-6e3b-41a4-8d73-833969367818", "eventTime": "2019-06-13T15:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ3AR43ADS6YDIXOK", "expiration": "Jun 13, 2019 9:29:56 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca85d8f-6e3b-41a4-8d73-833969367818", "record_id": "flaws_cloudtrail:0000196:bca85d8f-6e3b-41a4-8d73-833969367818", "row_index": 196, "timestamp": "2019-06-13T15:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca85d8f-6e3b-41a4-8d73-833969367818", "eventTime": "2019-06-13T15:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ3AR43ADS6YDIXOK", "expiration": "Jun 13, 2019 9:29:56 PM", "sessionToken": "AgoJb3JpZ2luX2VjELD//////////wEaCXVzLXdlc3QtMiJIMEYCIQDTCTU4Zj2Mozofby04XCJwuCBT4GVIYXeRMhFK40AWIAIhAPKrPeQDvB92D7kOmdThMRzD4chNNODvfp0ddgrdgluwKuMDCNn//////////wEQABoMOTc1NDI2MjYyMDI5IgxDejLiy/uPgnm4Z1cqtwP34URD74RXnsYZdqFHfzudXPjT1l/QEu60ZC4E+LHXmWKed+XOreCsFN0By98+cO/J/LsexUpV6n47ubYRJ4uN9rgEpWbOU5L/dIYtEmxNUGXo6glDgFoyCrxcvk71emeuzXQUN68ju6lS90nSPqyhhqHC0tctjSVB499h+SInyksaiwVDcmXmZ06vOvrGAaO6P4hUYzuDvHBMtaf5kXiH1jQC7H+02p6YwzaQEX665plHrxAijCDJAzXKtIafq5dOdToKRiixPPQOx4aRq2ShW2PWFDsEq9WZD1tOl+yWEgVBevahCCG5ecg3d5wrutWhIHL9UULJRlkw+WB/rqrlQHmUP51G2zol/a4R0kiQazvZJWtH07FKXkBlFPTjiZPE8fK4xYsT4tx5mYJlN052W7G4k4U/DmCkBlAJz5vzsC5V4xxxqTCFUohCfgqhfrca8rbN2T+qsunKAPRSENRcqXaRVd9UmxcSuTHcYPxUYPn/Y6zjB8zLYcm4ZO1EbsyVH1OxjBtocOCivtxE2fXAjINvC9L/6Tad+p644ic4oTqPkTKnCiIDFNPwhh8yvxh6j8l1OO8LMLPWiegFOrMBPb7zEb9hBNj/8U2uwq8/IZ//ui4+AUH3K+PCvIP+oNrscrwGMDV37NQe9RScLgMZ7PL81nxRs8rAN3o79epYtRlYwCzypjyUINPFxt6HaJ5WKyd0GqvN6E11IRK9ARrd69734OlhiTIG9j7LfbJPn663jn520QzoF1sMyAt90I8sovAPeIMOJC53XqSN84Y80ukl7sjAQS/5bqdXkYNN5cO2f1i9AL+T7n+PnoUOLuAL/S8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52eb5a1-51cc-4306-9911-f9458c25051", "record_id": "flaws_cloudtrail:0000197:a52eb5a1-51cc-4306-9911-f9458c25051", "row_index": 197, "timestamp": "2019-06-13T16:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52eb5a1-51cc-4306-9911-f9458c25051", "eventTime": "2019-06-13T16:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN9IG88JHRH0ZPH0J", "expiration": "Jun 13, 2019 10:56:13 PM", "sessionToken": "AgoJb3JpZ2luX2VjELH//////////wEaCXVzLXdlc3QtMiJGMEQCIEWfs0yLtuWqEtWVX41vnKJQzjfVwafYJX8zylvJAtSnAiBSSi31W4AmA+q7qH7OU82DUx2anz6ZEB0WLq4M0hk0aCrjAwja//////////8BEAAaDDk3NTQyNjI2MjAyOSIMRLi+YSUI32NcCue2KrcDtsSbILAgZqs6iXwKtxhT1y8KCjHsw+Js19erCOfQW4whpgQ2bqmD2M0q3kNpiZKqXHGX/0oMtp1WsRcEToEc+zN6Y9hozOTQjU/6DRthp9vG+tBbkKRH+e2CSw88RIqT5WrH/lQZ1JWc8tiLzhx25R4+39NDlGewVzLuu5NfOcus1FUJ/KpExpOXLrnnTezIG5li1IvoOtqxuGonMVOMfmSlMH5ygFivkpgN5o7bFIQB3qYevucIXMoM+ScbQgOnh4RjIzT/HTiMv8VLu1rRAb/AIbZBG1x8SGShYXxCw2Sa+3ty3GY0RtyAHs//h5BxuupebqvF3HXLq73+PRrRZ09iE/ICwV76ZfT8nJbRa8BxwAuAIi4flUrTN24HtDtA8cNQAnNAL+7ksjsFKSBENVXZCF7GdBP+ADYfJewNlTliY5EMvW0EzAezbJ/lpoLZWMjNsdIUy71UmeYRNFdBIAVaJDka71f4HYRQfgZpB9xzuPyXwpgyW6U6t5++AuKDViOAcMQ/a8eqaTbEdTVMC+pPjOznpUZTeNqPOWMzc1oNPZXJRkzaG/nGdT9W8TcN4XtFo9cDwTDD8onoBTq1AesGiB39E69P6DhA/ArUv0cy6om37qp50kLyhgyrsPIfl4pjC+0RMAZ5eUwbgWQCdJ9Umy4hx/A+qF5t3YbXrlXFUEclynWHP6MYMy2/SnmJptIWH/5xKzfz4Pa7VmZ3sW9LdAGnFyqe9d1T6Tz9gr+gUkMj1WU/qubhLIhEFEJeoNie6Qvcz6ULL1As+qOqmBNJQeP9diS642cKXr3Vs/vDyFufxfUmJPgBC3WzE7m6+QJm4Aw="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52eb5a1-51cc-4306-9911-f9458c25051", "record_id": "flaws_cloudtrail:0000198:a52eb5a1-51cc-4306-9911-f9458c25051", "row_index": 198, "timestamp": "2019-06-13T16:26:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52eb5a1-51cc-4306-9911-f9458c25051", "eventTime": "2019-06-13T16:26:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN9IG88JHRH0ZPH0J", "expiration": "Jun 13, 2019 10:56:13 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "621323fc3-1193-4b82-90d6-f892d7467e28", "record_id": "flaws_cloudtrail:0000199:621323fc3-1193-4b82-90d6-f892d7467e28", "row_index": 199, "timestamp": "2019-06-13T17:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "621323fc3-1193-4b82-90d6-f892d7467e28", "eventTime": "2019-06-13T17:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABC7ZC0G4FNRRKS4E", "expiration": "Jun 13, 2019 11:39:24 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "621323fc3-1193-4b82-90d6-f892d7467e28", "record_id": "flaws_cloudtrail:0000200:621323fc3-1193-4b82-90d6-f892d7467e28", "row_index": 200, "timestamp": "2019-06-13T17:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "621323fc3-1193-4b82-90d6-f892d7467e28", "eventTime": "2019-06-13T17:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABC7ZC0G4FNRRKS4E", "expiration": "Jun 13, 2019 11:39:24 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78356b-19b9-4d53-95c9-d7b1f19dbb02", "record_id": "flaws_cloudtrail:0000201:78356b-19b9-4d53-95c9-d7b1f19dbb02", "row_index": 201, "timestamp": "2019-06-13T18:25:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.95.250.85", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78356b-19b9-4d53-95c9-d7b1f19dbb02", "eventTime": "2019-06-13T18:25:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.95.250.85", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78356b-19b9-4d53-95c9-d7b1f19dbb02", "record_id": "flaws_cloudtrail:0000202:78356b-19b9-4d53-95c9-d7b1f19dbb02", "row_index": 202, "timestamp": "2019-06-13T18:25:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.95.250.85", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78356b-19b9-4d53-95c9-d7b1f19dbb02", "eventTime": "2019-06-13T18:25:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.95.250.85", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4931b95c-f52d-4985-8af4-5d05945e1b42", "record_id": "flaws_cloudtrail:0000203:4931b95c-f52d-4985-8af4-5d05945e1b42", "row_index": 203, "timestamp": "2019-06-13T18:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4931b95c-f52d-4985-8af4-5d05945e1b42", "eventTime": "2019-06-13T18:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABECKAEO2DKAMBU69", "expiration": "Jun 14, 2019 12:51:29 AM", "sessionToken": "AgoJb3JpZ2luX2VjELP//////////wEaCXVzLXdlc3QtMiJHMEUCIGyu+oeT/I86NJMk97Llr32Ry74lUBRElWg26v/waIOrAiEA0QeDLyTt2Tuh7QlptSHE0Vq4ls06TicTB63GuCo8XuIq4wMI3P//////////ARAAGgw5NzU0MjYyNjIwMjkiDOSU2/c8MomyCVYoRyq3AzHiQ2BbQVoXh5KEzuQcronmIXYRNFoicDqfklmGeiQH/T+NJgpE2//EgVAkvCIE6aq/+iHIRnjMDQR2rCwDP31iaWi/ySB4hZha8QULaXrw+/jUb7dy109Pj8+PhF2xiW4ECWB2+VF9z3Euiu011w2peyUR6XPUJfGxgOR62TdSiGTcLM3EZkt1oKITjquxgfuhuHtWDHD+gOGR3xMGXAa+cntsfRBi6XAkB+p4+ki6opkF6gkVyVge/mWciCWWgv7Q/wf/OcIrw14WUQ0w46mIroa0ZwkoS+hulAXnSJgZzHzOaOYT0JZw6pqWNH8VjM/W4/t3wx7dM/0IhyKSiTV1ELpLZ5QdMMFrDUydlpByQu64LNCST+KHb+CSyMqc/MFMTooLXkXhr724E8NKlvvFrdb+sfFCyEaIId3A18K0gvU3rua+IFXN0hcoXr3b+PjP4qRaxQYdTODFJgZywvHZpbuyhzpSuFIKimanzYjmkEpUg4we+te2kFQ4mcFhWiSimupK0CUT4t74MtPQMSIczl7oUw9blOtjR2W3WiutPcb451O8gd11yBNDFNzuWwPdQjHc/4gw5KqK6AU6tAHAiKlmrd7FOOW2V/YeZhK9xtwCTEvrIR0MUaNh2T3CcZ9xqpE8ucp5z8Jea0FwE0X3V86xXfMlwJy+g2HHIRsckQmrQ9VgRbsstMJTmWa2oM8Ne9CNjAcgpkaMwyxDWO+5xLMfV/Qgn8463Mw0TjQQvV4lYkePPYxPz6msnXhBmNcBNwP9vhYA/MFUKAWU/Ty5w1L6/tAVzwMTPHm0uwSFA/Z4awTwthbW3D762OYj0snI+0c="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4931b95c-f52d-4985-8af4-5d05945e1b42", "record_id": "flaws_cloudtrail:0000204:4931b95c-f52d-4985-8af4-5d05945e1b42", "row_index": 204, "timestamp": "2019-06-13T18:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4931b95c-f52d-4985-8af4-5d05945e1b42", "eventTime": "2019-06-13T18:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABECKAEO2DKAMBU69", "expiration": "Jun 14, 2019 12:51:29 AM", "sessionToken": "AgoJb3JpZ2luX2VjELP//////////wEaCXVzLXdlc3QtMiJHMEUCIGyu+oeT/I86NJMk97Llr32Ry74lUBRElWg26v/waIOrAiEA0QeDLyTt2Tuh7QlptSHE0Vq4ls06TicTB63GuCo8XuIq4wMI3P//////////ARAAGgw5NzU0MjYyNjIwMjkiDOSU2/c8MomyCVYoRyq3AzHiQ2BbQVoXh5KEzuQcronmIXYRNFoicDqfklmGeiQH/T+NJgpE2//EgVAkvCIE6aq/+iHIRnjMDQR2rCwDP31iaWi/ySB4hZha8QULaXrw+/jUb7dy109Pj8+PhF2xiW4ECWB2+VF9z3Euiu011w2peyUR6XPUJfGxgOR62TdSiGTcLM3EZkt1oKITjquxgfuhuHtWDHD+gOGR3xMGXAa+cntsfRBi6XAkB+p4+ki6opkF6gkVyVge/mWciCWWgv7Q/wf/OcIrw14WUQ0w46mIroa0ZwkoS+hulAXnSJgZzHzOaOYT0JZw6pqWNH8VjM/W4/t3wx7dM/0IhyKSiTV1ELpLZ5QdMMFrDUydlpByQu64LNCST+KHb+CSyMqc/MFMTooLXkXhr724E8NKlvvFrdb+sfFCyEaIId3A18K0gvU3rua+IFXN0hcoXr3b+PjP4qRaxQYdTODFJgZywvHZpbuyhzpSuFIKimanzYjmkEpUg4we+te2kFQ4mcFhWiSimupK0CUT4t74MtPQMSIczl7oUw9blOtjR2W3WiutPcb451O8gd11yBNDFNzuWwPdQjHc/4gw5KqK6AU6tAHAiKlmrd7FOOW2V/YeZhK9xtwCTEvrIR0MUaNh2T3CcZ9xqpE8ucp5z8Jea0FwE0X3V86xXfMlwJy+g2HHIRsckQmrQ9VgRbsstMJTmWa2oM8Ne9CNjAcgpkaMwyxDWO+5xLMfV/Qgn8463Mw0TjQQvV4lYkePPYxPz6msnXhBmNcBNwP9vhYA/MFUKAWU/Ty5w1L6/tAVzwMTPHm0uwSFA/Z4awTwthbW3D762OYj0snI+0c="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c41ac7d-735e-4158-be0f-d3e2122bad70", "record_id": "flaws_cloudtrail:0000205:2c41ac7d-735e-4158-be0f-d3e2122bad70", "row_index": 205, "timestamp": "2019-06-13T18:27:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c41ac7d-735e-4158-be0f-d3e2122bad70", "eventTime": "2019-06-13T18:27:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS3VX767LKU0JSO6D", "expiration": "Jun 13, 2019 7:27:24 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c41ac7d-735e-4158-be0f-d3e2122bad70", "record_id": "flaws_cloudtrail:0000206:2c41ac7d-735e-4158-be0f-d3e2122bad70", "row_index": 206, "timestamp": "2019-06-13T18:27:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c41ac7d-735e-4158-be0f-d3e2122bad70", "eventTime": "2019-06-13T18:27:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS3VX767LKU0JSO6D", "expiration": "Jun 13, 2019 7:27:24 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689bcabf-bab6-44eb-b544-b97b92f2071d", "record_id": "flaws_cloudtrail:0000207:689bcabf-bab6-44eb-b544-b97b92f2071d", "row_index": 207, "timestamp": "2019-06-13T18:28:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.95.250.85", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689bcabf-bab6-44eb-b544-b97b92f2071d", "eventTime": "2019-06-13T18:28:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.95.250.85", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689bcabf-bab6-44eb-b544-b97b92f2071d", "record_id": "flaws_cloudtrail:0000208:689bcabf-bab6-44eb-b544-b97b92f2071d", "row_index": 208, "timestamp": "2019-06-13T18:28:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.95.250.85", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689bcabf-bab6-44eb-b544-b97b92f2071d", "eventTime": "2019-06-13T18:28:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.95.250.85", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cce3bce-529e-4c4f-9f9a-2dd779f6002b", "record_id": "flaws_cloudtrail:0000209:9cce3bce-529e-4c4f-9f9a-2dd779f6002b", "row_index": 209, "timestamp": "2019-06-13T18:30:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.95.250.85", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cce3bce-529e-4c4f-9f9a-2dd779f6002b", "eventTime": "2019-06-13T18:30:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.95.250.85", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cce3bce-529e-4c4f-9f9a-2dd779f6002b", "record_id": "flaws_cloudtrail:0000210:9cce3bce-529e-4c4f-9f9a-2dd779f6002b", "row_index": 210, "timestamp": "2019-06-13T18:30:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.95.250.85", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cce3bce-529e-4c4f-9f9a-2dd779f6002b", "eventTime": "2019-06-13T18:30:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.95.250.85", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6c9cea-f596-4ce8-aae3-29d2af223d46", "record_id": "flaws_cloudtrail:0000211:de6c9cea-f596-4ce8-aae3-29d2af223d46", "row_index": 211, "timestamp": "2019-06-13T18:40:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6c9cea-f596-4ce8-aae3-29d2af223d46", "eventTime": "2019-06-13T18:40:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6c9cea-f596-4ce8-aae3-29d2af223d46", "record_id": "flaws_cloudtrail:0000212:de6c9cea-f596-4ce8-aae3-29d2af223d46", "row_index": 212, "timestamp": "2019-06-13T18:40:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6c9cea-f596-4ce8-aae3-29d2af223d46", "eventTime": "2019-06-13T18:40:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a5fb64-62a9-4da5-bac7-197dbad35330", "record_id": "flaws_cloudtrail:0000213:54a5fb64-62a9-4da5-bac7-197dbad35330", "row_index": 213, "timestamp": "2019-06-13T18:41:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a5fb64-62a9-4da5-bac7-197dbad35330", "eventTime": "2019-06-13T18:41:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a5fb64-62a9-4da5-bac7-197dbad35330", "record_id": "flaws_cloudtrail:0000214:54a5fb64-62a9-4da5-bac7-197dbad35330", "row_index": 214, "timestamp": "2019-06-13T18:41:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a5fb64-62a9-4da5-bac7-197dbad35330", "eventTime": "2019-06-13T18:41:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "377f5bd9-d881-43c2-b5f9-5836d861362a3", "record_id": "flaws_cloudtrail:0000215:377f5bd9-d881-43c2-b5f9-5836d861362a3", "row_index": 215, "timestamp": "2019-06-13T18:41:39Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "377f5bd9-d881-43c2-b5f9-5836d861362a3", "eventTime": "2019-06-13T18:41:39Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "377f5bd9-d881-43c2-b5f9-5836d861362a3", "record_id": "flaws_cloudtrail:0000216:377f5bd9-d881-43c2-b5f9-5836d861362a3", "row_index": 216, "timestamp": "2019-06-13T18:41:39Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "377f5bd9-d881-43c2-b5f9-5836d861362a3", "eventTime": "2019-06-13T18:41:39Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cdac45-cf9d-43c0-b776-52acddc392ab", "record_id": "flaws_cloudtrail:0000217:28cdac45-cf9d-43c0-b776-52acddc392ab", "row_index": 217, "timestamp": "2019-06-13T18:41:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cdac45-cf9d-43c0-b776-52acddc392ab", "eventTime": "2019-06-13T18:41:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cdac45-cf9d-43c0-b776-52acddc392ab", "record_id": "flaws_cloudtrail:0000218:28cdac45-cf9d-43c0-b776-52acddc392ab", "row_index": 218, "timestamp": "2019-06-13T18:41:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cdac45-cf9d-43c0-b776-52acddc392ab", "eventTime": "2019-06-13T18:41:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a005ff-d014-493f-afb4-8bfb9e721c86", "record_id": "flaws_cloudtrail:0000219:10a005ff-d014-493f-afb4-8bfb9e721c86", "row_index": 219, "timestamp": "2019-06-13T18:42:19Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a005ff-d014-493f-afb4-8bfb9e721c86", "eventTime": "2019-06-13T18:42:19Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a005ff-d014-493f-afb4-8bfb9e721c86", "record_id": "flaws_cloudtrail:0000220:10a005ff-d014-493f-afb4-8bfb9e721c86", "row_index": 220, "timestamp": "2019-06-13T18:42:19Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a005ff-d014-493f-afb4-8bfb9e721c86", "eventTime": "2019-06-13T18:42:19Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bebbc51-f7e6-49ca-a3eb-038902b7ad97", "record_id": "flaws_cloudtrail:0000221:8bebbc51-f7e6-49ca-a3eb-038902b7ad97", "row_index": 221, "timestamp": "2019-06-13T18:42:27Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bebbc51-f7e6-49ca-a3eb-038902b7ad97", "eventTime": "2019-06-13T18:42:27Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bebbc51-f7e6-49ca-a3eb-038902b7ad97", "record_id": "flaws_cloudtrail:0000222:8bebbc51-f7e6-49ca-a3eb-038902b7ad97", "row_index": 222, "timestamp": "2019-06-13T18:42:27Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bebbc51-f7e6-49ca-a3eb-038902b7ad97", "eventTime": "2019-06-13T18:42:27Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60542aa8-3be9-49a4-9a5e-9baa52e51bcc", "record_id": "flaws_cloudtrail:0000223:60542aa8-3be9-49a4-9a5e-9baa52e51bcc", "row_index": 223, "timestamp": "2019-06-13T18:42:35Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60542aa8-3be9-49a4-9a5e-9baa52e51bcc", "eventTime": "2019-06-13T18:42:35Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60542aa8-3be9-49a4-9a5e-9baa52e51bcc", "record_id": "flaws_cloudtrail:0000224:60542aa8-3be9-49a4-9a5e-9baa52e51bcc", "row_index": 224, "timestamp": "2019-06-13T18:42:35Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.255.119.0", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60542aa8-3be9-49a4-9a5e-9baa52e51bcc", "eventTime": "2019-06-13T18:42:35Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.255.119.0", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1de710f-74d9-4e86-b9d4-9c3763caea88", "record_id": "flaws_cloudtrail:0000225:c1de710f-74d9-4e86-b9d4-9c3763caea88", "row_index": 225, "timestamp": "2019-06-13T18:42:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1de710f-74d9-4e86-b9d4-9c3763caea88", "eventTime": "2019-06-13T18:42:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAABBKDJUA1HSD4V9P", "expiration": "Jun 14, 2019 6:42:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cdc316d-a364-4991-90cf-1ce69046cbb4", "record_id": "flaws_cloudtrail:0000226:0cdc316d-a364-4991-90cf-1ce69046cbb4", "row_index": 226, "timestamp": "2019-06-13T18:42:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cdc316d-a364-4991-90cf-1ce69046cbb4", "eventTime": "2019-06-13T18:42:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0JZDGB9I5FPC98GK", "expiration": "Jun 14, 2019 6:42:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1de710f-74d9-4e86-b9d4-9c3763caea88", "record_id": "flaws_cloudtrail:0000227:c1de710f-74d9-4e86-b9d4-9c3763caea88", "row_index": 227, "timestamp": "2019-06-13T18:42:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1de710f-74d9-4e86-b9d4-9c3763caea88", "eventTime": "2019-06-13T18:42:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAABBKDJUA1HSD4V9P", "expiration": "Jun 14, 2019 6:42:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cdc316d-a364-4991-90cf-1ce69046cbb4", "record_id": "flaws_cloudtrail:0000228:0cdc316d-a364-4991-90cf-1ce69046cbb4", "row_index": 228, "timestamp": "2019-06-13T18:42:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cdc316d-a364-4991-90cf-1ce69046cbb4", "eventTime": "2019-06-13T18:42:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0JZDGB9I5FPC98GK", "expiration": "Jun 14, 2019 6:42:43 AM", "sessionToken": "AgoJb3JpZ2luX2VjELP//////////wEaCXVzLXdlc3QtMiJHMEUCIGUILMTtJYNE0NuFmE93F1zaiBwuligueuIjsLzk2CymAiEA3nEOcRpXLoDnRBDG/UjCdDn6sf5byI9zd5CY1Pr0dU8qiwII3P//////////ARAAGgw5NzU0MjYyNjIwMjkiDO6Y7pDsElVWHfWOMCrfAarHjwUpUrKhyD1j23dWexe+yeYhp8Wd8uvmY3aPoT0bshMihLtkTCC+Tpw3BkRz7bBMmhzr0xst2OA41uBL1dDV431/LHDIBVKaaI8JpZe82H+oth50gX2uesdTqdx3uXb1BDR+B2cSwVMCnmx83saeBYkz2glS4jJMFgWH60TJzCCo9e++it6AqlF4qFzAJieXQmnXu98CoBdlR1AcXdp3Q2ECfg3hpIFkAk60M2QSDk6WULnTweu8BCmiRxqwxSqZaOvYRPJ0sxlCrOxuigQjBWZAVoXTEzZ4DNi5eikwo7KK6AU6tAHMJbr04w1BhSItZlaxmFwaqfg97mKJustbTrvM77IHgYZzFwxq9hOxTMjFUbefV41UBT1zW4h92DA2fT4MSbbDmiZT1XILXww/XP2O3d5rffOcbXyzCq+KxQ9/vTr23QymS+R4034AHp5fEgSYbB/0iCjpLeH1cfLUSCqnlupNAEdrgLdi/V1bEVP790dXnrXTSZ5NaRtGREAVlrY/GTVoOs9kguYCgh+9M308t7t75BJ7ymE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e1d2ad3-3990-4594-aec0-efd0c7a1be57", "record_id": "flaws_cloudtrail:0000229:4e1d2ad3-3990-4594-aec0-efd0c7a1be57", "row_index": 229, "timestamp": "2019-06-13T18:42:44Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAABBKDJUA1HSD4V9P", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "216.243.13.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e1d2ad3-3990-4594-aec0-efd0c7a1be57", "eventTime": "2019-06-13T18:42:44Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.243.13.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAABBKDJUA1HSD4V9P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T18:42:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/13/[$LATEST]c26a3d1664a7870b0dbc89483047953e"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e1d2ad3-3990-4594-aec0-efd0c7a1be57", "record_id": "flaws_cloudtrail:0000230:4e1d2ad3-3990-4594-aec0-efd0c7a1be57", "row_index": 230, "timestamp": "2019-06-13T18:42:44Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAABBKDJUA1HSD4V9P", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "216.243.13.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e1d2ad3-3990-4594-aec0-efd0c7a1be57", "eventTime": "2019-06-13T18:42:44Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.243.13.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAABBKDJUA1HSD4V9P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T18:42:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/13/[$LATEST]c26a3d1664a7870b0dbc89483047953e"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71efbc67-25ff-48f7-9eb1-ab3a48fff941", "record_id": "flaws_cloudtrail:0000231:71efbc67-25ff-48f7-9eb1-ab3a48fff941", "row_index": 231, "timestamp": "2019-06-13T18:44:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71efbc67-25ff-48f7-9eb1-ab3a48fff941", "eventTime": "2019-06-13T18:44:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71efbc67-25ff-48f7-9eb1-ab3a48fff941", "record_id": "flaws_cloudtrail:0000232:71efbc67-25ff-48f7-9eb1-ab3a48fff941", "row_index": 232, "timestamp": "2019-06-13T18:44:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71efbc67-25ff-48f7-9eb1-ab3a48fff941", "eventTime": "2019-06-13T18:44:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8510e855-4345-4c18-839f-5c449bc47ca5", "record_id": "flaws_cloudtrail:0000233:8510e855-4345-4c18-839f-5c449bc47ca5", "row_index": 233, "timestamp": "2019-06-13T18:50:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8510e855-4345-4c18-839f-5c449bc47ca5", "eventTime": "2019-06-13T18:50:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8510e855-4345-4c18-839f-5c449bc47ca5", "record_id": "flaws_cloudtrail:0000234:8510e855-4345-4c18-839f-5c449bc47ca5", "row_index": 234, "timestamp": "2019-06-13T18:50:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8510e855-4345-4c18-839f-5c449bc47ca5", "eventTime": "2019-06-13T18:50:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b237ffc-73b1-46ac-8c9b-6b28dd7adedd", "record_id": "flaws_cloudtrail:0000235:5b237ffc-73b1-46ac-8c9b-6b28dd7adedd", "row_index": 235, "timestamp": "2019-06-13T18:51:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b237ffc-73b1-46ac-8c9b-6b28dd7adedd", "eventTime": "2019-06-13T18:51:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b237ffc-73b1-46ac-8c9b-6b28dd7adedd", "record_id": "flaws_cloudtrail:0000236:5b237ffc-73b1-46ac-8c9b-6b28dd7adedd", "row_index": 236, "timestamp": "2019-06-13T18:51:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b237ffc-73b1-46ac-8c9b-6b28dd7adedd", "eventTime": "2019-06-13T18:51:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd5f320-a482-41ae-a05b-c643a95e07a5", "record_id": "flaws_cloudtrail:0000237:9bd5f320-a482-41ae-a05b-c643a95e07a5", "row_index": 237, "timestamp": "2019-06-13T18:51:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd5f320-a482-41ae-a05b-c643a95e07a5", "eventTime": "2019-06-13T18:51:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuT0xLdlJlUVU0d29rckNVMktWZDRzY2hFYTVHalJYWUNqU1JXY2Y4VkE2V2hRZXl0ajZhaFVOZlFYYnN1MHRjREkrZENyQW5iOEFNcHdKbHVrS0ZEaUxUYS83ZDByWVdUbFJQeFgwaVFFcERkekhuYzBUR083b0M0dDVNRlV6d1RiTjlXOWo3MlBERVBiQWlNYnFYdXR5V1pLQ0hwZTR6MHJRUTA0dzdleTlOYTRXeUtIdmVucVBpWnNtcGY3eHRBSFl6eFB2bzJzTEJKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd5f320-a482-41ae-a05b-c643a95e07a5", "record_id": "flaws_cloudtrail:0000238:9bd5f320-a482-41ae-a05b-c643a95e07a5", "row_index": 238, "timestamp": "2019-06-13T18:51:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd5f320-a482-41ae-a05b-c643a95e07a5", "eventTime": "2019-06-13T18:51:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuT0xLdlJlUVU0d29rckNVMktWZDRzY2hFYTVHalJYWUNqU1JXY2Y4VkE2V2hRZXl0ajZhaFVOZlFYYnN1MHRjREkrZENyQW5iOEFNcHdKbHVrS0ZEaUxUYS83ZDByWVdUbFJQeFgwaVFFcERkekhuYzBUR083b0M0dDVNRlV6d1RiTjlXOWo3MlBERVBiQWlNYnFYdXR5V1pLQ0hwZTR6MHJRUTA0dzdleTlOYTRXeUtIdmVucVBpWnNtcGY3eHRBSFl6eFB2bzJzTEJKdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "685572a47-b0dc-4e81-b35d-790d252edc57", "record_id": "flaws_cloudtrail:0000239:685572a47-b0dc-4e81-b35d-790d252edc57", "row_index": 239, "timestamp": "2019-06-13T18:51:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "685572a47-b0dc-4e81-b35d-790d252edc57", "eventTime": "2019-06-13T18:51:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "685572a47-b0dc-4e81-b35d-790d252edc57", "record_id": "flaws_cloudtrail:0000240:685572a47-b0dc-4e81-b35d-790d252edc57", "row_index": 240, "timestamp": "2019-06-13T18:51:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "685572a47-b0dc-4e81-b35d-790d252edc57", "eventTime": "2019-06-13T18:51:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dff35c03-c95f-4759-9f9a-b5e196bb308a", "record_id": "flaws_cloudtrail:0000241:dff35c03-c95f-4759-9f9a-b5e196bb308a", "row_index": 241, "timestamp": "2019-06-13T18:51:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dff35c03-c95f-4759-9f9a-b5e196bb308a", "eventTime": "2019-06-13T18:51:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dff35c03-c95f-4759-9f9a-b5e196bb308a", "record_id": "flaws_cloudtrail:0000242:dff35c03-c95f-4759-9f9a-b5e196bb308a", "row_index": 242, "timestamp": "2019-06-13T18:51:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.254.169.46", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dff35c03-c95f-4759-9f9a-b5e196bb308a", "eventTime": "2019-06-13T18:51:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.254.169.46", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ab1625-cc49-4478-8859-ff62d1c54601", "record_id": "flaws_cloudtrail:0000243:f0ab1625-cc49-4478-8859-ff62d1c54601", "row_index": 243, "timestamp": "2019-06-13T19:16:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ab1625-cc49-4478-8859-ff62d1c54601", "eventTime": "2019-06-13T19:16:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ab1625-cc49-4478-8859-ff62d1c54601", "record_id": "flaws_cloudtrail:0000244:f0ab1625-cc49-4478-8859-ff62d1c54601", "row_index": 244, "timestamp": "2019-06-13T19:16:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ab1625-cc49-4478-8859-ff62d1c54601", "eventTime": "2019-06-13T19:16:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "719716f3d-dcf2-4e8c-8a80-4f266e9df7ba", "record_id": "flaws_cloudtrail:0000245:719716f3d-dcf2-4e8c-8a80-4f266e9df7ba", "row_index": 245, "timestamp": "2019-06-13T19:16:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "719716f3d-dcf2-4e8c-8a80-4f266e9df7ba", "eventTime": "2019-06-13T19:16:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "719716f3d-dcf2-4e8c-8a80-4f266e9df7ba", "record_id": "flaws_cloudtrail:0000246:719716f3d-dcf2-4e8c-8a80-4f266e9df7ba", "row_index": 246, "timestamp": "2019-06-13T19:16:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "719716f3d-dcf2-4e8c-8a80-4f266e9df7ba", "eventTime": "2019-06-13T19:16:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044703a9-0367-4b92-9493-d44ce57f8a6d", "record_id": "flaws_cloudtrail:0000247:044703a9-0367-4b92-9493-d44ce57f8a6d", "row_index": 247, "timestamp": "2019-06-13T19:17:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "[aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044703a9-0367-4b92-9493-d44ce57f8a6d", "eventTime": "2019-06-13T19:17:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "[aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044703a9-0367-4b92-9493-d44ce57f8a6d", "record_id": "flaws_cloudtrail:0000248:044703a9-0367-4b92-9493-d44ce57f8a6d", "row_index": 248, "timestamp": "2019-06-13T19:17:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "[aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044703a9-0367-4b92-9493-d44ce57f8a6d", "eventTime": "2019-06-13T19:17:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "[aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b663168de-d985-436d-9f11-3f9e811c44e8", "record_id": "flaws_cloudtrail:0000249:b663168de-d985-436d-9f11-3f9e811c44e8", "row_index": 249, "timestamp": "2019-06-13T19:17:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b663168de-d985-436d-9f11-3f9e811c44e8", "eventTime": "2019-06-13T19:17:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b663168de-d985-436d-9f11-3f9e811c44e8", "record_id": "flaws_cloudtrail:0000250:b663168de-d985-436d-9f11-3f9e811c44e8", "row_index": 250, "timestamp": "2019-06-13T19:17:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b663168de-d985-436d-9f11-3f9e811c44e8", "eventTime": "2019-06-13T19:17:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128502-c7d3-4246-847f-c5a2aef5ae4e", "record_id": "flaws_cloudtrail:0000251:128502-c7d3-4246-847f-c5a2aef5ae4e", "row_index": 251, "timestamp": "2019-06-13T19:17:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128502-c7d3-4246-847f-c5a2aef5ae4e", "eventTime": "2019-06-13T19:17:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128502-c7d3-4246-847f-c5a2aef5ae4e", "record_id": "flaws_cloudtrail:0000252:128502-c7d3-4246-847f-c5a2aef5ae4e", "row_index": 252, "timestamp": "2019-06-13T19:17:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128502-c7d3-4246-847f-c5a2aef5ae4e", "eventTime": "2019-06-13T19:17:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed34f034-e23b-449d-9653-9afb99884b0", "record_id": "flaws_cloudtrail:0000253:ed34f034-e23b-449d-9653-9afb99884b0", "row_index": 253, "timestamp": "2019-06-13T19:18:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed34f034-e23b-449d-9653-9afb99884b0", "eventTime": "2019-06-13T19:18:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed34f034-e23b-449d-9653-9afb99884b0", "record_id": "flaws_cloudtrail:0000254:ed34f034-e23b-449d-9653-9afb99884b0", "row_index": 254, "timestamp": "2019-06-13T19:18:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.3.0.115", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed34f034-e23b-449d-9653-9afb99884b0", "eventTime": "2019-06-13T19:18:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.3.0.115", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93208-6e4d-46d2-956d-7e5736c45e61", "record_id": "flaws_cloudtrail:0000255:93208-6e4d-46d2-956d-7e5736c45e61", "row_index": 255, "timestamp": "2019-06-13T19:21:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93208-6e4d-46d2-956d-7e5736c45e61", "eventTime": "2019-06-13T19:21:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93208-6e4d-46d2-956d-7e5736c45e61", "record_id": "flaws_cloudtrail:0000256:93208-6e4d-46d2-956d-7e5736c45e61", "row_index": 256, "timestamp": "2019-06-13T19:21:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93208-6e4d-46d2-956d-7e5736c45e61", "eventTime": "2019-06-13T19:21:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d88961-41c3-43aa-886a-557b68d3737b", "record_id": "flaws_cloudtrail:0000257:e0d88961-41c3-43aa-886a-557b68d3737b", "row_index": 257, "timestamp": "2019-06-13T19:24:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "72.250.5.168", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d88961-41c3-43aa-886a-557b68d3737b", "eventTime": "2019-06-13T19:24:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "72.250.5.168", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d88961-41c3-43aa-886a-557b68d3737b", "record_id": "flaws_cloudtrail:0000258:e0d88961-41c3-43aa-886a-557b68d3737b", "row_index": 258, "timestamp": "2019-06-13T19:24:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "72.250.5.168", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d88961-41c3-43aa-886a-557b68d3737b", "eventTime": "2019-06-13T19:24:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "72.250.5.168", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a59fdba-fb70-42ca-a664-a94c41d3bf74", "record_id": "flaws_cloudtrail:0000259:2a59fdba-fb70-42ca-a664-a94c41d3bf74", "row_index": 259, "timestamp": "2019-06-13T19:26:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a59fdba-fb70-42ca-a664-a94c41d3bf74", "eventTime": "2019-06-13T19:26:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a59fdba-fb70-42ca-a664-a94c41d3bf74", "record_id": "flaws_cloudtrail:0000260:2a59fdba-fb70-42ca-a664-a94c41d3bf74", "row_index": 260, "timestamp": "2019-06-13T19:26:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a59fdba-fb70-42ca-a664-a94c41d3bf74", "eventTime": "2019-06-13T19:26:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "[aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515a59c5-2f3f-487d-a4da-5ef40dd82480", "record_id": "flaws_cloudtrail:0000261:515a59c5-2f3f-487d-a4da-5ef40dd82480", "row_index": 261, "timestamp": "2019-06-13T19:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515a59c5-2f3f-487d-a4da-5ef40dd82480", "eventTime": "2019-06-13T19:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7AJGLJQMBFKKPO2U", "expiration": "Jun 14, 2019 1:57:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515a59c5-2f3f-487d-a4da-5ef40dd82480", "record_id": "flaws_cloudtrail:0000262:515a59c5-2f3f-487d-a4da-5ef40dd82480", "row_index": 262, "timestamp": "2019-06-13T19:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515a59c5-2f3f-487d-a4da-5ef40dd82480", "eventTime": "2019-06-13T19:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7AJGLJQMBFKKPO2U", "expiration": "Jun 14, 2019 1:57:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35e5a5ec-3b9d-4c35-a351-4975f633b039", "record_id": "flaws_cloudtrail:0000263:35e5a5ec-3b9d-4c35-a351-4975f633b039", "row_index": 263, "timestamp": "2019-06-13T19:33:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35e5a5ec-3b9d-4c35-a351-4975f633b039", "eventTime": "2019-06-13T19:33:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35e5a5ec-3b9d-4c35-a351-4975f633b039", "record_id": "flaws_cloudtrail:0000264:35e5a5ec-3b9d-4c35-a351-4975f633b039", "row_index": 264, "timestamp": "2019-06-13T19:33:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35e5a5ec-3b9d-4c35-a351-4975f633b039", "eventTime": "2019-06-13T19:33:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff586e29-46a0-4d35-93c5-4c20e171fddc", "record_id": "flaws_cloudtrail:0000265:ff586e29-46a0-4d35-93c5-4c20e171fddc", "row_index": 265, "timestamp": "2019-06-13T19:33:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff586e29-46a0-4d35-93c5-4c20e171fddc", "eventTime": "2019-06-13T19:33:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff586e29-46a0-4d35-93c5-4c20e171fddc", "record_id": "flaws_cloudtrail:0000266:ff586e29-46a0-4d35-93c5-4c20e171fddc", "row_index": 266, "timestamp": "2019-06-13T19:33:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff586e29-46a0-4d35-93c5-4c20e171fddc", "eventTime": "2019-06-13T19:33:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9391f883-e7ea-4049-b1df-970a8e8b1021", "record_id": "flaws_cloudtrail:0000267:9391f883-e7ea-4049-b1df-970a8e8b1021", "row_index": 267, "timestamp": "2019-06-13T19:34:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9391f883-e7ea-4049-b1df-970a8e8b1021", "eventTime": "2019-06-13T19:34:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9391f883-e7ea-4049-b1df-970a8e8b1021", "record_id": "flaws_cloudtrail:0000268:9391f883-e7ea-4049-b1df-970a8e8b1021", "row_index": 268, "timestamp": "2019-06-13T19:34:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9391f883-e7ea-4049-b1df-970a8e8b1021", "eventTime": "2019-06-13T19:34:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715d4b8f-d4b9-4751-9f22-c0e33346d5", "record_id": "flaws_cloudtrail:0000269:715d4b8f-d4b9-4751-9f22-c0e33346d5", "row_index": 269, "timestamp": "2019-06-13T19:34:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715d4b8f-d4b9-4751-9f22-c0e33346d5", "eventTime": "2019-06-13T19:34:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715d4b8f-d4b9-4751-9f22-c0e33346d5", "record_id": "flaws_cloudtrail:0000270:715d4b8f-d4b9-4751-9f22-c0e33346d5", "row_index": 270, "timestamp": "2019-06-13T19:34:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715d4b8f-d4b9-4751-9f22-c0e33346d5", "eventTime": "2019-06-13T19:34:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60eb0ddb-aa12-4b43-af8a-51341980c92a", "record_id": "flaws_cloudtrail:0000271:60eb0ddb-aa12-4b43-af8a-51341980c92a", "row_index": 271, "timestamp": "2019-06-13T19:34:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "157.3.216.2", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/7 botocore/1.12.164]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60eb0ddb-aa12-4b43-af8a-51341980c92a", "eventTime": "2019-06-13T19:34:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "157.3.216.2", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/7 botocore/1.12.164]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60eb0ddb-aa12-4b43-af8a-51341980c92a", "record_id": "flaws_cloudtrail:0000272:60eb0ddb-aa12-4b43-af8a-51341980c92a", "row_index": 272, "timestamp": "2019-06-13T19:34:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "157.3.216.2", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/7 botocore/1.12.164]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60eb0ddb-aa12-4b43-af8a-51341980c92a", "eventTime": "2019-06-13T19:34:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "157.3.216.2", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/7 botocore/1.12.164]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa2770ef-6743-44f7-8986-6765c206160e2", "record_id": "flaws_cloudtrail:0000273:fa2770ef-6743-44f7-8986-6765c206160e2", "row_index": 273, "timestamp": "2019-06-13T19:35:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa2770ef-6743-44f7-8986-6765c206160e2", "eventTime": "2019-06-13T19:35:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa2770ef-6743-44f7-8986-6765c206160e2", "record_id": "flaws_cloudtrail:0000274:fa2770ef-6743-44f7-8986-6765c206160e2", "row_index": 274, "timestamp": "2019-06-13T19:35:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa2770ef-6743-44f7-8986-6765c206160e2", "eventTime": "2019-06-13T19:35:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e70b4a53-6058-47c2-bc4c-15050fec5473", "record_id": "flaws_cloudtrail:0000275:e70b4a53-6058-47c2-bc4c-15050fec5473", "row_index": 275, "timestamp": "2019-06-13T19:35:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e70b4a53-6058-47c2-bc4c-15050fec5473", "eventTime": "2019-06-13T19:35:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e70b4a53-6058-47c2-bc4c-15050fec5473", "record_id": "flaws_cloudtrail:0000276:e70b4a53-6058-47c2-bc4c-15050fec5473", "row_index": 276, "timestamp": "2019-06-13T19:35:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e70b4a53-6058-47c2-bc4c-15050fec5473", "eventTime": "2019-06-13T19:35:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a385e133-3e05-4c8f-8716-702f560e2027", "record_id": "flaws_cloudtrail:0000277:a385e133-3e05-4c8f-8716-702f560e2027", "row_index": 277, "timestamp": "2019-06-13T19:35:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a385e133-3e05-4c8f-8716-702f560e2027", "eventTime": "2019-06-13T19:35:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a385e133-3e05-4c8f-8716-702f560e2027", "record_id": "flaws_cloudtrail:0000278:a385e133-3e05-4c8f-8716-702f560e2027", "row_index": 278, "timestamp": "2019-06-13T19:35:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.78.108.8", "user_agent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a385e133-3e05-4c8f-8716-702f560e2027", "eventTime": "2019-06-13T19:35:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.78.108.8", "userAgent": "aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5ffd77-7537-4c74-915b-32e9f4480eb0", "record_id": "flaws_cloudtrail:0000279:dc5ffd77-7537-4c74-915b-32e9f4480eb0", "row_index": 279, "timestamp": "2019-06-13T19:35:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5ffd77-7537-4c74-915b-32e9f4480eb0", "eventTime": "2019-06-13T19:35:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5ffd77-7537-4c74-915b-32e9f4480eb0", "record_id": "flaws_cloudtrail:0000280:dc5ffd77-7537-4c74-915b-32e9f4480eb0", "row_index": 280, "timestamp": "2019-06-13T19:35:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.233.61.2", "user_agent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5ffd77-7537-4c74-915b-32e9f4480eb0", "eventTime": "2019-06-13T19:35:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.233.61.2", "userAgent": "aws-cli/1.16.173 Python/3.6.0 Windows/10 botocore/1.12.163", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbda316b-4516-4c02-9e5f-6e3a113ebadb", "record_id": "flaws_cloudtrail:0000281:fbda316b-4516-4c02-9e5f-6e3a113ebadb", "row_index": 281, "timestamp": "2019-06-13T19:36:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.106.131.223", "user_agent": "[aws-cli/1.16.72 Python/3.6.0 Windows/10 botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbda316b-4516-4c02-9e5f-6e3a113ebadb", "eventTime": "2019-06-13T19:36:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.106.131.223", "userAgent": "[aws-cli/1.16.72 Python/3.6.0 Windows/10 botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbda316b-4516-4c02-9e5f-6e3a113ebadb", "record_id": "flaws_cloudtrail:0000282:fbda316b-4516-4c02-9e5f-6e3a113ebadb", "row_index": 282, "timestamp": "2019-06-13T19:36:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.106.131.223", "user_agent": "[aws-cli/1.16.72 Python/3.6.0 Windows/10 botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbda316b-4516-4c02-9e5f-6e3a113ebadb", "eventTime": "2019-06-13T19:36:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.106.131.223", "userAgent": "[aws-cli/1.16.72 Python/3.6.0 Windows/10 botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb01acf4-0804-41ac-9d9c-920f657bbf09", "record_id": "flaws_cloudtrail:0000283:fb01acf4-0804-41ac-9d9c-920f657bbf09", "row_index": 283, "timestamp": "2019-06-13T19:37:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.255.9.250", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb01acf4-0804-41ac-9d9c-920f657bbf09", "eventTime": "2019-06-13T19:37:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.255.9.250", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb01acf4-0804-41ac-9d9c-920f657bbf09", "record_id": "flaws_cloudtrail:0000284:fb01acf4-0804-41ac-9d9c-920f657bbf09", "row_index": 284, "timestamp": "2019-06-13T19:37:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.255.9.250", "user_agent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb01acf4-0804-41ac-9d9c-920f657bbf09", "eventTime": "2019-06-13T19:37:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.255.9.250", "userAgent": "[aws-cli/1.16.174 Python/3.6.0 Windows/10 botocore/1.12.164]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b357a419-7126-41d1-8d4c-c82b1e95ce39", "record_id": "flaws_cloudtrail:0000285:b357a419-7126-41d1-8d4c-c82b1e95ce39", "row_index": 285, "timestamp": "2019-06-13T19:41:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b357a419-7126-41d1-8d4c-c82b1e95ce39", "eventTime": "2019-06-13T19:41:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b357a419-7126-41d1-8d4c-c82b1e95ce39", "record_id": "flaws_cloudtrail:0000286:b357a419-7126-41d1-8d4c-c82b1e95ce39", "row_index": 286, "timestamp": "2019-06-13T19:41:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b357a419-7126-41d1-8d4c-c82b1e95ce39", "eventTime": "2019-06-13T19:41:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318807a2-4651-427a-8b5b-2d29428834f6", "record_id": "flaws_cloudtrail:0000287:318807a2-4651-427a-8b5b-2d29428834f6", "row_index": 287, "timestamp": "2019-06-13T19:41:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318807a2-4651-427a-8b5b-2d29428834f6", "eventTime": "2019-06-13T19:41:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318807a2-4651-427a-8b5b-2d29428834f6", "record_id": "flaws_cloudtrail:0000288:318807a2-4651-427a-8b5b-2d29428834f6", "row_index": 288, "timestamp": "2019-06-13T19:41:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318807a2-4651-427a-8b5b-2d29428834f6", "eventTime": "2019-06-13T19:41:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11877-c710-4329-a210-999ccfe406eb", "record_id": "flaws_cloudtrail:0000289:11877-c710-4329-a210-999ccfe406eb", "row_index": 289, "timestamp": "2019-06-13T19:42:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11877-c710-4329-a210-999ccfe406eb", "eventTime": "2019-06-13T19:42:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11877-c710-4329-a210-999ccfe406eb", "record_id": "flaws_cloudtrail:0000290:11877-c710-4329-a210-999ccfe406eb", "row_index": 290, "timestamp": "2019-06-13T19:42:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11877-c710-4329-a210-999ccfe406eb", "eventTime": "2019-06-13T19:42:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55d52a23-5213-4b21-a161-05bc9199b4fc", "record_id": "flaws_cloudtrail:0000291:55d52a23-5213-4b21-a161-05bc9199b4fc", "row_index": 291, "timestamp": "2019-06-13T19:42:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55d52a23-5213-4b21-a161-05bc9199b4fc", "eventTime": "2019-06-13T19:42:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZU9nVjRCYU51MmZ0S2ZsTkFFSXdFZ29xdlUvNGFESTZNOG5DTGFqOVFVYnArd1poSEg0QWZRNTFWQkZ0bXU1VWk5R1NGWEhpRkZMTTdOVkhHWk1qSXlMUC92Q2t6YWFSekNKZGpNY2ptcWlVNEZBa29Yb003K0NFbjhKZG4vTDY0MWdoNVVKaTczQmhoQWFzWk5xVUFyS3d6ZU1uUEFBcjJDWlVxMkt3TWlCNDgzaWJqeVorYzN2MUUrNXBWakR5S1FxZmJsMExLQVduQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55d52a23-5213-4b21-a161-05bc9199b4fc", "record_id": "flaws_cloudtrail:0000292:55d52a23-5213-4b21-a161-05bc9199b4fc", "row_index": 292, "timestamp": "2019-06-13T19:42:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55d52a23-5213-4b21-a161-05bc9199b4fc", "eventTime": "2019-06-13T19:42:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZU9nVjRCYU51MmZ0S2ZsTkFFSXdFZ29xdlUvNGFESTZNOG5DTGFqOVFVYnArd1poSEg0QWZRNTFWQkZ0bXU1VWk5R1NGWEhpRkZMTTdOVkhHWk1qSXlMUC92Q2t6YWFSekNKZGpNY2ptcWlVNEZBa29Yb003K0NFbjhKZG4vTDY0MWdoNVVKaTczQmhoQWFzWk5xVUFyS3d6ZU1uUEFBcjJDWlVxMkt3TWlCNDgzaWJqeVorYzN2MUUrNXBWakR5S1FxZmJsMExLQVduQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4038af05-0205-472b-9cf3-29d6c2f8a210", "record_id": "flaws_cloudtrail:0000293:4038af05-0205-472b-9cf3-29d6c2f8a210", "row_index": 293, "timestamp": "2019-06-13T19:42:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4038af05-0205-472b-9cf3-29d6c2f8a210", "eventTime": "2019-06-13T19:42:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMVNyU0MrSS9MekVEZEpRYVgvdG01THY3dkxFVktuOEFidkx3ZVcrZDJ0V05UREhaS1FjZ1hBSWJaNE0zaTVHeHNESmxUZTZWZmNXWndEV0hlejlqeDdqaGxTVWRXMUJNU0FsZ3VEaTI5RFVjSENBZ1JmcXc4ck5tTFVjWGh4VGhSU0NSOVEwNHM5ZWFlalpybHZ0LzFlLzY3TVAyT2hUZ1JsemtUWHI1dFhRRGducUZDaFlhU2hxU2diTHBmMUoySFJwYWdMWWdKV25IQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4038af05-0205-472b-9cf3-29d6c2f8a210", "record_id": "flaws_cloudtrail:0000294:4038af05-0205-472b-9cf3-29d6c2f8a210", "row_index": 294, "timestamp": "2019-06-13T19:42:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4038af05-0205-472b-9cf3-29d6c2f8a210", "eventTime": "2019-06-13T19:42:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMVNyU0MrSS9MekVEZEpRYVgvdG01THY3dkxFVktuOEFidkx3ZVcrZDJ0V05UREhaS1FjZ1hBSWJaNE0zaTVHeHNESmxUZTZWZmNXWndEV0hlejlqeDdqaGxTVWRXMUJNU0FsZ3VEaTI5RFVjSENBZ1JmcXc4ck5tTFVjWGh4VGhSU0NSOVEwNHM5ZWFlalpybHZ0LzFlLzY3TVAyT2hUZ1JsemtUWHI1dFhRRGducUZDaFlhU2hxU2diTHBmMUoySFJwYWdMWWdKV25IQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3802eaa-b119-4a0d-9cee-7fd5e9b72e0a", "record_id": "flaws_cloudtrail:0000295:a3802eaa-b119-4a0d-9cee-7fd5e9b72e0a", "row_index": 295, "timestamp": "2019-06-13T19:42:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3802eaa-b119-4a0d-9cee-7fd5e9b72e0a", "eventTime": "2019-06-13T19:42:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3VTdKYXZPblAvcjZwbCtOQ1hhTlZPd0ROeDRlamVmRG9pSE83N0xseDJTcUIrVnRlallHZGlmcnFtODRFUTBVd2dPWld0ZEJmOWNDbWh4ekROK2NzTjdUYWFCNWJzaWRkVStWZGNJQWxoY2ozRUZnajJKbENOaHoxN0FtMzV5bWp5SG1xY05NY1RTMjNMczNDNkU0K1A0NFlmQ0FBQXYxMTN3S3BkRDcxYTJqaGYvUDdBazNKbnpvV2kwRjJ5Z3NmUllMYWJKbzhJdkQvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3802eaa-b119-4a0d-9cee-7fd5e9b72e0a", "record_id": "flaws_cloudtrail:0000296:a3802eaa-b119-4a0d-9cee-7fd5e9b72e0a", "row_index": 296, "timestamp": "2019-06-13T19:42:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3802eaa-b119-4a0d-9cee-7fd5e9b72e0a", "eventTime": "2019-06-13T19:42:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3VTdKYXZPblAvcjZwbCtOQ1hhTlZPd0ROeDRlamVmRG9pSE83N0xseDJTcUIrVnRlallHZGlmcnFtODRFUTBVd2dPWld0ZEJmOWNDbWh4ekROK2NzTjdUYWFCNWJzaWRkVStWZGNJQWxoY2ozRUZnajJKbENOaHoxN0FtMzV5bWp5SG1xY05NY1RTMjNMczNDNkU0K1A0NFlmQ0FBQXYxMTN3S3BkRDcxYTJqaGYvUDdBazNKbnpvV2kwRjJ5Z3NmUllMYWJKbzhJdkQvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9040a0f-5b61-4c7c-a6dd-f20a9dd35a3a", "record_id": "flaws_cloudtrail:0000297:e9040a0f-5b61-4c7c-a6dd-f20a9dd35a3a", "row_index": 297, "timestamp": "2019-06-13T19:42:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9040a0f-5b61-4c7c-a6dd-f20a9dd35a3a", "eventTime": "2019-06-13T19:42:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V2s2dTVQQ2lWdzhMMVJrOGtkbGoxaGhacFcvZFc2a2F6R3BZZU9zV0szZVFMREZ1VkE4Y0xaNUhoN0tBZGlaUG1SRzB4YmlUVUxMdE5WTzVLdFVZZ25zVzVmY1dyTVdtSWttM1A0dzVSUDAyVDJ6UGcxcWNoL0NGS3puTU83SWJoRmZJUit4WTErcGJQN2dySFIzY2FWQXI3eHU5bTYwbXRCTkdZeUpzais4OGplWktnM0t0STQzVmZ1eGxkUHovcC81ZGRncyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9040a0f-5b61-4c7c-a6dd-f20a9dd35a3a", "record_id": "flaws_cloudtrail:0000298:e9040a0f-5b61-4c7c-a6dd-f20a9dd35a3a", "row_index": 298, "timestamp": "2019-06-13T19:42:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9040a0f-5b61-4c7c-a6dd-f20a9dd35a3a", "eventTime": "2019-06-13T19:42:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V2s2dTVQQ2lWdzhMMVJrOGtkbGoxaGhacFcvZFc2a2F6R3BZZU9zV0szZVFMREZ1VkE4Y0xaNUhoN0tBZGlaUG1SRzB4YmlUVUxMdE5WTzVLdFVZZ25zVzVmY1dyTVdtSWttM1A0dzVSUDAyVDJ6UGcxcWNoL0NGS3puTU83SWJoRmZJUit4WTErcGJQN2dySFIzY2FWQXI3eHU5bTYwbXRCTkdZeUpzais4OGplWktnM0t0STQzVmZ1eGxkUHovcC81ZGRncyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a82013-12ce-4d31-b6ba-abeee62dc72d", "record_id": "flaws_cloudtrail:0000299:a82013-12ce-4d31-b6ba-abeee62dc72d", "row_index": 299, "timestamp": "2019-06-13T19:42:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a82013-12ce-4d31-b6ba-abeee62dc72d", "eventTime": "2019-06-13T19:42:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2MEhrR0JVbmNhbFpBZzh2S25BdVF1cmkvK3lPcjR5TDlwQ01MMUNmMmN2MGdCTmgwWDQ2WUx6MVFQZTF4ayswazZRb3ozbGVRcTMzeDExQlJuVGpEaDFIV3F3ZU5vS3lXZ1BtVjJrUFV1QTlReDFZQjZKTE8rQzNIL1MyeW8zdGQvTHhZZk00UmV4bFlQRDNpQ1g2aEhnSWdrZ3BvODlhUi9zR01GUEtNdHRCMlJjVUhNWWVYWjZhRGdaajBXa1oyclZDVG0yem13PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a82013-12ce-4d31-b6ba-abeee62dc72d", "record_id": "flaws_cloudtrail:0000300:a82013-12ce-4d31-b6ba-abeee62dc72d", "row_index": 300, "timestamp": "2019-06-13T19:42:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a82013-12ce-4d31-b6ba-abeee62dc72d", "eventTime": "2019-06-13T19:42:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2MEhrR0JVbmNhbFpBZzh2S25BdVF1cmkvK3lPcjR5TDlwQ01MMUNmMmN2MGdCTmgwWDQ2WUx6MVFQZTF4ayswazZRb3ozbGVRcTMzeDExQlJuVGpEaDFIV3F3ZU5vS3lXZ1BtVjJrUFV1QTlReDFZQjZKTE8rQzNIL1MyeW8zdGQvTHhZZk00UmV4bFlQRDNpQ1g2aEhnSWdrZ3BvODlhUi9zR01GUEtNdHRCMlJjVUhNWWVYWjZhRGdaajBXa1oyclZDVG0yem13PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65c6b0bf-8086-4631-a7b8-477e2d606989", "record_id": "flaws_cloudtrail:0000301:65c6b0bf-8086-4631-a7b8-477e2d606989", "row_index": 301, "timestamp": "2019-06-13T19:42:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65c6b0bf-8086-4631-a7b8-477e2d606989", "eventTime": "2019-06-13T19:42:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNEx5d1ZySkJQWE1oN2pES1NmcWszMjRDZXB6TUZ1NnBuVkVDY0d1TUtXcGFhOUp2aWNuZVM2RERZeHduZHZHeWZmYjdaSXIySWtpRTIrWGRndGRZaVBHMlFmNEpFN1k0RklpZGxkTTl6L0VMMVBiK1UxcE9LSzh3eGxsMjZpVnlFS1FoZ3ZHbUxXSERwZ3ltc3NpdmxGOFhoMU9FQmNmcFBEUzdnWEhnRXBFZytMcngyRlZCNFp4a1ZSdmlrVEp4L1lZakh2QmdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65c6b0bf-8086-4631-a7b8-477e2d606989", "record_id": "flaws_cloudtrail:0000302:65c6b0bf-8086-4631-a7b8-477e2d606989", "row_index": 302, "timestamp": "2019-06-13T19:42:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65c6b0bf-8086-4631-a7b8-477e2d606989", "eventTime": "2019-06-13T19:42:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNEx5d1ZySkJQWE1oN2pES1NmcWszMjRDZXB6TUZ1NnBuVkVDY0d1TUtXcGFhOUp2aWNuZVM2RERZeHduZHZHeWZmYjdaSXIySWtpRTIrWGRndGRZaVBHMlFmNEpFN1k0RklpZGxkTTl6L0VMMVBiK1UxcE9LSzh3eGxsMjZpVnlFS1FoZ3ZHbUxXSERwZ3ltc3NpdmxGOFhoMU9FQmNmcFBEUzdnWEhnRXBFZytMcngyRlZCNFp4a1ZSdmlrVEp4L1lZakh2QmdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb9af2ea-27b6-4739-b542-ce58a690e764", "record_id": "flaws_cloudtrail:0000303:eb9af2ea-27b6-4739-b542-ce58a690e764", "row_index": 303, "timestamp": "2019-06-13T19:42:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb9af2ea-27b6-4739-b542-ce58a690e764", "eventTime": "2019-06-13T19:42:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnK0VFL09uSkRJK2p2MWRxMHhkRW51Ymx2UStHN3N3b3lnTG1qait3czNrTDZFQXVVZStBMS8wa2xMYTFDZjQyQU53WjMvVHpwZzd1TzIyNWc1YUczUlo4M0xmVytVNUtYR1htbUNybE1oNytTajNYYTdNMGQwL3VFZVh4MEVGcUxVZG96VmFEYS9FSzFqWCtwcW14L1dFRzV1WEtvdWNSTlNwRnZPRC9XeUNtanl4SXJoWnd0a0FUaEpoWlJoTFFxQUJ5bVdPMXdHWmJWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb9af2ea-27b6-4739-b542-ce58a690e764", "record_id": "flaws_cloudtrail:0000304:eb9af2ea-27b6-4739-b542-ce58a690e764", "row_index": 304, "timestamp": "2019-06-13T19:42:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb9af2ea-27b6-4739-b542-ce58a690e764", "eventTime": "2019-06-13T19:42:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnK0VFL09uSkRJK2p2MWRxMHhkRW51Ymx2UStHN3N3b3lnTG1qait3czNrTDZFQXVVZStBMS8wa2xMYTFDZjQyQU53WjMvVHpwZzd1TzIyNWc1YUczUlo4M0xmVytVNUtYR1htbUNybE1oNytTajNYYTdNMGQwL3VFZVh4MEVGcUxVZG96VmFEYS9FSzFqWCtwcW14L1dFRzV1WEtvdWNSTlNwRnZPRC9XeUNtanl4SXJoWnd0a0FUaEpoWlJoTFFxQUJ5bVdPMXdHWmJWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0acf9139-e059-482d-9632-9f131c74ddb7", "record_id": "flaws_cloudtrail:0000305:0acf9139-e059-482d-9632-9f131c74ddb7", "row_index": 305, "timestamp": "2019-06-13T19:42:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0acf9139-e059-482d-9632-9f131c74ddb7", "eventTime": "2019-06-13T19:42:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkbDk4cFEvR3BKV3VoRlZLc2FLUmRiTFRodUJEM0pYQVBkYllCZ2Z5cGZmRG00TDZmc3VwcFVCcm1vU2JCbGZsUDByOUNoSUtlN0dOc2g3NWVhS0ZwclFsck53bXF6dFVBMDV2Y0o1UlpESHcySWZjckdjVUVDKzE0SklaTUo3WWk1Vks2dDZoZXNyZWRGdzN5MkdCYkZzaFJyOUFCZTd6SUtyL0NybmJRWEVET0w0NmtHaGhvVERBckIrTUZOMzZidXFxZUFTS0ZFWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0acf9139-e059-482d-9632-9f131c74ddb7", "record_id": "flaws_cloudtrail:0000306:0acf9139-e059-482d-9632-9f131c74ddb7", "row_index": 306, "timestamp": "2019-06-13T19:42:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0acf9139-e059-482d-9632-9f131c74ddb7", "eventTime": "2019-06-13T19:42:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkbDk4cFEvR3BKV3VoRlZLc2FLUmRiTFRodUJEM0pYQVBkYllCZ2Z5cGZmRG00TDZmc3VwcFVCcm1vU2JCbGZsUDByOUNoSUtlN0dOc2g3NWVhS0ZwclFsck53bXF6dFVBMDV2Y0o1UlpESHcySWZjckdjVUVDKzE0SklaTUo3WWk1Vks2dDZoZXNyZWRGdzN5MkdCYkZzaFJyOUFCZTd6SUtyL0NybmJRWEVET0w0NmtHaGhvVERBckIrTUZOMzZidXFxZUFTS0ZFWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0886dc42-30d1-4195-af0d-681e4c442811", "record_id": "flaws_cloudtrail:0000307:0886dc42-30d1-4195-af0d-681e4c442811", "row_index": 307, "timestamp": "2019-06-13T19:42:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0886dc42-30d1-4195-af0d-681e4c442811", "eventTime": "2019-06-13T19:42:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxZHRGeFRvU3FudDRYeVYwc2Jxdy9GWUZmTjk4SlNzdm85T0VSbnB2REcwb1pleDNubHMyQTd3R0x4QWZ0Ukl4TENGdk1hU3NoZUgwVjFVV1V5RkNxSElSbEpYeXpRQVIrd21iMHBLdHV6VnRlaitJZUVSUWR6NkhVVjd2dVYvOFFMYnUwRGo3Snc0aFd0dXFrbkI1L0tQeGNKeXdBejQ2NTYvQXV1VkFlQTR3aXR5WWMxUjl6ZWNHNnVadFdRTWZVOXRWeDJ6Q3hRL0JpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0886dc42-30d1-4195-af0d-681e4c442811", "record_id": "flaws_cloudtrail:0000308:0886dc42-30d1-4195-af0d-681e4c442811", "row_index": 308, "timestamp": "2019-06-13T19:42:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0886dc42-30d1-4195-af0d-681e4c442811", "eventTime": "2019-06-13T19:42:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxZHRGeFRvU3FudDRYeVYwc2Jxdy9GWUZmTjk4SlNzdm85T0VSbnB2REcwb1pleDNubHMyQTd3R0x4QWZ0Ukl4TENGdk1hU3NoZUgwVjFVV1V5RkNxSElSbEpYeXpRQVIrd21iMHBLdHV6VnRlaitJZUVSUWR6NkhVVjd2dVYvOFFMYnUwRGo3Snc0aFd0dXFrbkI1L0tQeGNKeXdBejQ2NTYvQXV1VkFlQTR3aXR5WWMxUjl6ZWNHNnVadFdRTWZVOXRWeDJ6Q3hRL0JpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71d35886-98d2-4a76-bb28-94d108d10ade", "record_id": "flaws_cloudtrail:0000309:71d35886-98d2-4a76-bb28-94d108d10ade", "row_index": 309, "timestamp": "2019-06-13T19:42:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71d35886-98d2-4a76-bb28-94d108d10ade", "eventTime": "2019-06-13T19:42:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWMnBTVlhKcHMweU80NkttUjUrTjNVMUUveEdQRlM3Vm9IeGFQdXM4QUtGMUIrZlBBZ2djVll6aFhSNnczZzQ2YXdPVkx2NTFURWI0UUJzTlNzWXJobzMwZEFKc0VTdE03R2trRk5qTEkzMzQ2UTBHay9CRlY2cTg4VzR6OWpoVkt1Z0ZrbDZlZlJLZVRORlVDcWJ4eElPTFBzMVNFcTcvUnV0dmpkM0hSLzF0aXYxaEpkUzlhSHFXaURBenFHelhLNjdIK2Jmc1VlZ3lHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71d35886-98d2-4a76-bb28-94d108d10ade", "record_id": "flaws_cloudtrail:0000310:71d35886-98d2-4a76-bb28-94d108d10ade", "row_index": 310, "timestamp": "2019-06-13T19:42:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71d35886-98d2-4a76-bb28-94d108d10ade", "eventTime": "2019-06-13T19:42:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWMnBTVlhKcHMweU80NkttUjUrTjNVMUUveEdQRlM3Vm9IeGFQdXM4QUtGMUIrZlBBZ2djVll6aFhSNnczZzQ2YXdPVkx2NTFURWI0UUJzTlNzWXJobzMwZEFKc0VTdE03R2trRk5qTEkzMzQ2UTBHay9CRlY2cTg4VzR6OWpoVkt1Z0ZrbDZlZlJLZVRORlVDcWJ4eElPTFBzMVNFcTcvUnV0dmpkM0hSLzF0aXYxaEpkUzlhSHFXaURBenFHelhLNjdIK2Jmc1VlZ3lHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30a7582-f67e-4916-9089-b9a6bfb4b203", "record_id": "flaws_cloudtrail:0000311:e30a7582-f67e-4916-9089-b9a6bfb4b203", "row_index": 311, "timestamp": "2019-06-13T19:42:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30a7582-f67e-4916-9089-b9a6bfb4b203", "eventTime": "2019-06-13T19:42:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmbVdORmpyYjVGeXlvTFMrM2syWFZ2cU5zY20rV0wrV0JReTFLdmUxRmtLeG13NFhMUWQrWnU4L2tIb0Mwa1hTY05TQmJTbjBUZjhXd3dkVU5LNUtYeHVSaFVYUkRaclJkMHdkMHpDOEVuR0RleW40QVdJL04vQzFzckkwTlBTRms3YkRnekF3UzBrNmZnc3JlRkp5a2VZK0MyeXhVMDhnQ3A2aFp5N2Y4U0VZbS92WmFicEpyT0ZLUVFBVGRYd2NuL2lRbEE4MVNFZXcyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30a7582-f67e-4916-9089-b9a6bfb4b203", "record_id": "flaws_cloudtrail:0000312:e30a7582-f67e-4916-9089-b9a6bfb4b203", "row_index": 312, "timestamp": "2019-06-13T19:42:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30a7582-f67e-4916-9089-b9a6bfb4b203", "eventTime": "2019-06-13T19:42:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmbVdORmpyYjVGeXlvTFMrM2syWFZ2cU5zY20rV0wrV0JReTFLdmUxRmtLeG13NFhMUWQrWnU4L2tIb0Mwa1hTY05TQmJTbjBUZjhXd3dkVU5LNUtYeHVSaFVYUkRaclJkMHdkMHpDOEVuR0RleW40QVdJL04vQzFzckkwTlBTRms3YkRnekF3UzBrNmZnc3JlRkp5a2VZK0MyeXhVMDhnQ3A2aFp5N2Y4U0VZbS92WmFicEpyT0ZLUVFBVGRYd2NuL2lRbEE4MVNFZXcyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71575c4-ad6c-43fd-ac75-c680fdca704a", "record_id": "flaws_cloudtrail:0000313:71575c4-ad6c-43fd-ac75-c680fdca704a", "row_index": 313, "timestamp": "2019-06-13T19:42:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71575c4-ad6c-43fd-ac75-c680fdca704a", "eventTime": "2019-06-13T19:42:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBYzY1anNsS0U4MENlaURpMkNGQ2NNNjZJRlRjTXJKV0NnSDRUU01HTFNiR3RMS1VaWjk2RE9nb1A1WkFwK1lKcGduMFd0SnJxUVhWWW1ERi9RU2JLdGZWdSsrYlA4dDNpZ1hpN25ldWhvWDhVSUVZcUhvWTN0S2JueU16cjBsd2FRUG9tOWUrMjZGKzZnRnB2UDRQZlFpQTV3eHY1TnFZOHRwU0VtZVlsMjdhVTc4NXhkNmoxYkV1WjFEZytLbVJkR3Q1NVNyTzBsNnJHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71575c4-ad6c-43fd-ac75-c680fdca704a", "record_id": "flaws_cloudtrail:0000314:71575c4-ad6c-43fd-ac75-c680fdca704a", "row_index": 314, "timestamp": "2019-06-13T19:42:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71575c4-ad6c-43fd-ac75-c680fdca704a", "eventTime": "2019-06-13T19:42:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBYzY1anNsS0U4MENlaURpMkNGQ2NNNjZJRlRjTXJKV0NnSDRUU01HTFNiR3RMS1VaWjk2RE9nb1A1WkFwK1lKcGduMFd0SnJxUVhWWW1ERi9RU2JLdGZWdSsrYlA4dDNpZ1hpN25ldWhvWDhVSUVZcUhvWTN0S2JueU16cjBsd2FRUG9tOWUrMjZGKzZnRnB2UDRQZlFpQTV3eHY1TnFZOHRwU0VtZVlsMjdhVTc4NXhkNmoxYkV1WjFEZytLbVJkR3Q1NVNyTzBsNnJHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2caf7072-8025-4e70-96e5-04bd03d09d36", "record_id": "flaws_cloudtrail:0000315:2caf7072-8025-4e70-96e5-04bd03d09d36", "row_index": 315, "timestamp": "2019-06-13T19:42:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2caf7072-8025-4e70-96e5-04bd03d09d36", "eventTime": "2019-06-13T19:42:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaYXdzS04yeXNuVWgrbGtvY3lMb1lwTFpKZWhxeVBEbTNmZFQvWVJXUzBXdko0MjMxR3I2OGlJM001b1NGK254S3o2cTdsWHVMU2hTTnBkSVpJV0ZHamU2bTd0dG9iQkl3R0N6aUN0UVZoV1dPSXdKNzY5SVowYXlPdDZhTFZCbkgyWW5vVEFaMzVxRmlveGNkSnlNb2FJRjI0V0MwRWx5K3NDNWs4SzI1eEN6ZzVEVUJHdk85S25lcnhjR0dGNTNOSlYzcnFwdDhoWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2caf7072-8025-4e70-96e5-04bd03d09d36", "record_id": "flaws_cloudtrail:0000316:2caf7072-8025-4e70-96e5-04bd03d09d36", "row_index": 316, "timestamp": "2019-06-13T19:42:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2caf7072-8025-4e70-96e5-04bd03d09d36", "eventTime": "2019-06-13T19:42:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaYXdzS04yeXNuVWgrbGtvY3lMb1lwTFpKZWhxeVBEbTNmZFQvWVJXUzBXdko0MjMxR3I2OGlJM001b1NGK254S3o2cTdsWHVMU2hTTnBkSVpJV0ZHamU2bTd0dG9iQkl3R0N6aUN0UVZoV1dPSXdKNzY5SVowYXlPdDZhTFZCbkgyWW5vVEFaMzVxRmlveGNkSnlNb2FJRjI0V0MwRWx5K3NDNWs4SzI1eEN6ZzVEVUJHdk85S25lcnhjR0dGNTNOSlYzcnFwdDhoWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f692cde3-91bf-4a40-a44d-56ef46333f8c", "record_id": "flaws_cloudtrail:0000317:f692cde3-91bf-4a40-a44d-56ef46333f8c", "row_index": 317, "timestamp": "2019-06-13T19:42:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f692cde3-91bf-4a40-a44d-56ef46333f8c", "eventTime": "2019-06-13T19:42:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJobFRPYXJwbTRKUnZIMC96SG03WnpvbGExVURSMmFkems5MU1Kd0pscGttc2lZMUJGRlI1R2lERWJsbFJMRFpPQUtlV2J4dmo5WWJxTlVVay9DRWdVZXBNTW5qTy9TM1Blak1lOERjWnNXZGdmTGpaOExlKzZtajE0TWtqZDBxSkx0VTMxYXpwdCtkUzZLMExLcVdvbVlUKzJwQnl1MjNyb0NtL0JmVk43MWxuZXFUSmpLU1FzUzhGcytCRHlXZ25HbHZRSUQ3VzRKemJQaXJ0LzRqTllydGtjbGFhUFdZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f692cde3-91bf-4a40-a44d-56ef46333f8c", "record_id": "flaws_cloudtrail:0000318:f692cde3-91bf-4a40-a44d-56ef46333f8c", "row_index": 318, "timestamp": "2019-06-13T19:42:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f692cde3-91bf-4a40-a44d-56ef46333f8c", "eventTime": "2019-06-13T19:42:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJobFRPYXJwbTRKUnZIMC96SG03WnpvbGExVURSMmFkems5MU1Kd0pscGttc2lZMUJGRlI1R2lERWJsbFJMRFpPQUtlV2J4dmo5WWJxTlVVay9DRWdVZXBNTW5qTy9TM1Blak1lOERjWnNXZGdmTGpaOExlKzZtajE0TWtqZDBxSkx0VTMxYXpwdCtkUzZLMExLcVdvbVlUKzJwQnl1MjNyb0NtL0JmVk43MWxuZXFUSmpLU1FzUzhGcytCRHlXZ25HbHZRSUQ3VzRKemJQaXJ0LzRqTllydGtjbGFhUFdZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc72dff1-ac7e-4b81-8c3c-fff37875ce62", "record_id": "flaws_cloudtrail:0000319:fc72dff1-ac7e-4b81-8c3c-fff37875ce62", "row_index": 319, "timestamp": "2019-06-13T19:42:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc72dff1-ac7e-4b81-8c3c-fff37875ce62", "eventTime": "2019-06-13T19:42:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNFd0VDJlMzZVLzRETXgrQzh0N3ZXYVRrcVhIVmFYK0pOeDYrYjZod2NldnlnUk9odlcyTFdoL3g5bzhPN2NiZ1J0RnNCRUk2dHlUbVovNWsrMnNQRWRpSUpZNWlUOHVPVG5zNjkvbTFQcXhMVDZoc2RwbTV3VGRaQlZldnRzT2RmNXdSdmg1RXdPK04wMHdDY1o3STVEc3lMMExUY1VaNDVOYUo3T2c3Vkh6VCtPdEtWanNYR24zWkdvSGN1VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc72dff1-ac7e-4b81-8c3c-fff37875ce62", "record_id": "flaws_cloudtrail:0000320:fc72dff1-ac7e-4b81-8c3c-fff37875ce62", "row_index": 320, "timestamp": "2019-06-13T19:42:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc72dff1-ac7e-4b81-8c3c-fff37875ce62", "eventTime": "2019-06-13T19:42:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNFd0VDJlMzZVLzRETXgrQzh0N3ZXYVRrcVhIVmFYK0pOeDYrYjZod2NldnlnUk9odlcyTFdoL3g5bzhPN2NiZ1J0RnNCRUk2dHlUbVovNWsrMnNQRWRpSUpZNWlUOHVPVG5zNjkvbTFQcXhMVDZoc2RwbTV3VGRaQlZldnRzT2RmNXdSdmg1RXdPK04wMHdDY1o3STVEc3lMMExUY1VaNDVOYUo3T2c3Vkh6VCtPdEtWanNYR24zWkdvSGN1VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d25daad6-1ee4-4a26-bd99-a34e8fdaeaf3", "record_id": "flaws_cloudtrail:0000321:d25daad6-1ee4-4a26-bd99-a34e8fdaeaf3", "row_index": 321, "timestamp": "2019-06-13T19:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d25daad6-1ee4-4a26-bd99-a34e8fdaeaf3", "eventTime": "2019-06-13T19:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbW1ibGNCVG9RNW4wK0VNV3h5WWtFeDVMQ1NNRDcrR2tnbGU0bmRMZ0c0ZExOdlRxemp2Z243R1Y2S1hheU5YZ21kMGNLdy9YR2hPV3B2a1lwSUJJdndxM0hHNnF1a0Urdy9CWGtLQjNvNXhveVJ0Um1FYUhCWFNXVkZ4b3c0blN2UkRSQUh1K2xXbHJXeWxYeWNXcnVBZnJTRi84Yk5tZFJaalVMK2s5Skk3Z2hjRmZwS3AzUzdrckpBbVlGc2MxQ2tmbnl3WGxYWDB2T0tvUitqSGpmRjFtMFhka1J3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9846f8f2-47dd-4b36-8cab-b4fa4fe5f028", "record_id": "flaws_cloudtrail:0000322:9846f8f2-47dd-4b36-8cab-b4fa4fe5f028", "row_index": 322, "timestamp": "2019-06-13T19:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9846f8f2-47dd-4b36-8cab-b4fa4fe5f028", "eventTime": "2019-06-13T19:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUnBOcnNsUVVaMG1jVHZyMVpWVjRUOXJBcmVnTGtOUWlKNTAya1NjcERJTEF1cm9rV25FWjNCMGEyaGttbElyZkFtOUNVdm9QUVAzSUNDOXVwL05vd1V6S1dKS3o2RUpzRWlHUDgvck5iaU9NTjMwZ1NNS0ZyK3NjU0ZoZlk1ZXZPVUJocU1hTDk2cDErWlZFaGc5by9jRkV5dE5XOHpCVzlBVit4cHNPZWw3LzNieWJOYjczZ3NCeWVWK1MzTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d25daad6-1ee4-4a26-bd99-a34e8fdaeaf3", "record_id": "flaws_cloudtrail:0000323:d25daad6-1ee4-4a26-bd99-a34e8fdaeaf3", "row_index": 323, "timestamp": "2019-06-13T19:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d25daad6-1ee4-4a26-bd99-a34e8fdaeaf3", "eventTime": "2019-06-13T19:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbW1ibGNCVG9RNW4wK0VNV3h5WWtFeDVMQ1NNRDcrR2tnbGU0bmRMZ0c0ZExOdlRxemp2Z243R1Y2S1hheU5YZ21kMGNLdy9YR2hPV3B2a1lwSUJJdndxM0hHNnF1a0Urdy9CWGtLQjNvNXhveVJ0Um1FYUhCWFNXVkZ4b3c0blN2UkRSQUh1K2xXbHJXeWxYeWNXcnVBZnJTRi84Yk5tZFJaalVMK2s5Skk3Z2hjRmZwS3AzUzdrckpBbVlGc2MxQ2tmbnl3WGxYWDB2T0tvUitqSGpmRjFtMFhka1J3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9846f8f2-47dd-4b36-8cab-b4fa4fe5f028", "record_id": "flaws_cloudtrail:0000324:9846f8f2-47dd-4b36-8cab-b4fa4fe5f028", "row_index": 324, "timestamp": "2019-06-13T19:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9846f8f2-47dd-4b36-8cab-b4fa4fe5f028", "eventTime": "2019-06-13T19:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUnBOcnNsUVVaMG1jVHZyMVpWVjRUOXJBcmVnTGtOUWlKNTAya1NjcERJTEF1cm9rV25FWjNCMGEyaGttbElyZkFtOUNVdm9QUVAzSUNDOXVwL05vd1V6S1dKS3o2RUpzRWlHUDgvck5iaU9NTjMwZ1NNS0ZyK3NjU0ZoZlk1ZXZPVUJocU1hTDk2cDErWlZFaGc5by9jRkV5dE5XOHpCVzlBVit4cHNPZWw3LzNieWJOYjczZ3NCeWVWK1MzTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c4fb97-36be-44e5-a2ad-1af26ee11128", "record_id": "flaws_cloudtrail:0000325:80c4fb97-36be-44e5-a2ad-1af26ee11128", "row_index": 325, "timestamp": "2019-06-13T19:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c4fb97-36be-44e5-a2ad-1af26ee11128", "eventTime": "2019-06-13T19:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOR3V0ZGE0TnRWUVJCZjhmMytmM1pob054aTBjZzU1SUFSQUxLV3BvYkNXSDRBMk9IWTZDRE1heTN5b3ZBUUJoUzNkQnVGMnlqa09NemdIRjk4ZEtnUmNPMDAxbk94QkNmWVhQQ2gxd1JTZG54aTVhcFpheTFlNXp0WFBzRTB1ZFZlN2U0UWp0SEt2K05sT3FjbW5rcmhBWkZBTkNBYnZSTDRNL1VBS2dPbEZPbXZQYmh0WmdGaTA1WWtsdGszc1ZKMmdzWVVvQUcyQ0tyUks3czlqWXBLMGo4U1AzS2E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c4fb97-36be-44e5-a2ad-1af26ee11128", "record_id": "flaws_cloudtrail:0000326:80c4fb97-36be-44e5-a2ad-1af26ee11128", "row_index": 326, "timestamp": "2019-06-13T19:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c4fb97-36be-44e5-a2ad-1af26ee11128", "eventTime": "2019-06-13T19:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOR3V0ZGE0TnRWUVJCZjhmMytmM1pob054aTBjZzU1SUFSQUxLV3BvYkNXSDRBMk9IWTZDRE1heTN5b3ZBUUJoUzNkQnVGMnlqa09NemdIRjk4ZEtnUmNPMDAxbk94QkNmWVhQQ2gxd1JTZG54aTVhcFpheTFlNXp0WFBzRTB1ZFZlN2U0UWp0SEt2K05sT3FjbW5rcmhBWkZBTkNBYnZSTDRNL1VBS2dPbEZPbXZQYmh0WmdGaTA1WWtsdGszc1ZKMmdzWVVvQUcyQ0tyUks3czlqWXBLMGo4U1AzS2E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe062f3e-e804-4745-9e02-85203aa9b16a", "record_id": "flaws_cloudtrail:0000327:fe062f3e-e804-4745-9e02-85203aa9b16a", "row_index": 327, "timestamp": "2019-06-13T19:42:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe062f3e-e804-4745-9e02-85203aa9b16a", "eventTime": "2019-06-13T19:42:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBbno2SHB6Mm90YWJqdTlxUzZQSW0wN2JHQllaNzNGNFJ0a2tLbTlybTg0emdSK0pIOFhEeitDSHQxc3UrQ2xtZG9GS3ZIQzRYN3Q2aXRjNko0N09BeXFoaDlDeExwaStCckVnN2s4UXRvVjBGZ0E1aTl2aExrUGFodjZ5YjRzUVRIdVZQMG5RQXF0MVZnaHQxYTdGZnQ5QzZ3NEt4V21SUzdOOUcwSHFxbE0yQzBUVHA3QzNMSU9xanJKcndyQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe062f3e-e804-4745-9e02-85203aa9b16a", "record_id": "flaws_cloudtrail:0000328:fe062f3e-e804-4745-9e02-85203aa9b16a", "row_index": 328, "timestamp": "2019-06-13T19:42:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe062f3e-e804-4745-9e02-85203aa9b16a", "eventTime": "2019-06-13T19:42:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBbno2SHB6Mm90YWJqdTlxUzZQSW0wN2JHQllaNzNGNFJ0a2tLbTlybTg0emdSK0pIOFhEeitDSHQxc3UrQ2xtZG9GS3ZIQzRYN3Q2aXRjNko0N09BeXFoaDlDeExwaStCckVnN2s4UXRvVjBGZ0E1aTl2aExrUGFodjZ5YjRzUVRIdVZQMG5RQXF0MVZnaHQxYTdGZnQ5QzZ3NEt4V21SUzdOOUcwSHFxbE0yQzBUVHA3QzNMSU9xanJKcndyQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92e67498-2ad8-4919-80a5-8ffa4e06b82f", "record_id": "flaws_cloudtrail:0000329:92e67498-2ad8-4919-80a5-8ffa4e06b82f", "row_index": 329, "timestamp": "2019-06-13T19:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92e67498-2ad8-4919-80a5-8ffa4e06b82f", "eventTime": "2019-06-13T19:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNVRwOEswaXEvREFFUjJBOFR5S0twdlMrQkJVWmJtY1RPQ2NWVTdkK3d2a2RqNnZpTmZIc2ZOM3FSOEZ0RXI5eUh3U2lnMFNPb2xSRHBKRGR3SGhFVi9pQmtrdVJtc2tEKyttckVPTm5WSmJmNi9kVEZLaG5mUGpqUmpKM2k0R1VJSHJWRjZ1R2prTEJORXdpOS9QcTJCUzhvN0plZlJpYTRGdXVZcU5PN1BHRitLcFA0QjFiNkQ5TFZpUERReWRySW0vVjhzaTY1Snc3MmE1NDdCSCtBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a740c912-af83-485c-b995-656b2c5dfe75", "record_id": "flaws_cloudtrail:0000330:a740c912-af83-485c-b995-656b2c5dfe75", "row_index": 330, "timestamp": "2019-06-13T19:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a740c912-af83-485c-b995-656b2c5dfe75", "eventTime": "2019-06-13T19:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQmgvUzNkMVBxRXNJNWllUkxUcHhGU3VRcGFVOWdvUmJRbjVncG80dXVwQXZiU0dtLytNcEwxYmMybnlEWWRKV0VFRS9UMC81cHQrbGpmQ0JIdGVZdlBJNnl6RVdiNWJhR2VYMXBTKzd0ZFphOHFxS3YxVmZIbnp6cjRwREwvOVFkSXdGRG13WU5qeHM2eHJlc0Z6aVpNL0NEY2dqZjFDcDFkbzRyWTZiMyt5STBGK1UvTlFjTVNuNkF6M2JQYjVPcHdHVVNrS1hjbHZpUFp5VWhKL0Vxd2hSeDhFWkdBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92e67498-2ad8-4919-80a5-8ffa4e06b82f", "record_id": "flaws_cloudtrail:0000331:92e67498-2ad8-4919-80a5-8ffa4e06b82f", "row_index": 331, "timestamp": "2019-06-13T19:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92e67498-2ad8-4919-80a5-8ffa4e06b82f", "eventTime": "2019-06-13T19:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNVRwOEswaXEvREFFUjJBOFR5S0twdlMrQkJVWmJtY1RPQ2NWVTdkK3d2a2RqNnZpTmZIc2ZOM3FSOEZ0RXI5eUh3U2lnMFNPb2xSRHBKRGR3SGhFVi9pQmtrdVJtc2tEKyttckVPTm5WSmJmNi9kVEZLaG5mUGpqUmpKM2k0R1VJSHJWRjZ1R2prTEJORXdpOS9QcTJCUzhvN0plZlJpYTRGdXVZcU5PN1BHRitLcFA0QjFiNkQ5TFZpUERReWRySW0vVjhzaTY1Snc3MmE1NDdCSCtBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a740c912-af83-485c-b995-656b2c5dfe75", "record_id": "flaws_cloudtrail:0000332:a740c912-af83-485c-b995-656b2c5dfe75", "row_index": 332, "timestamp": "2019-06-13T19:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a740c912-af83-485c-b995-656b2c5dfe75", "eventTime": "2019-06-13T19:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQmgvUzNkMVBxRXNJNWllUkxUcHhGU3VRcGFVOWdvUmJRbjVncG80dXVwQXZiU0dtLytNcEwxYmMybnlEWWRKV0VFRS9UMC81cHQrbGpmQ0JIdGVZdlBJNnl6RVdiNWJhR2VYMXBTKzd0ZFphOHFxS3YxVmZIbnp6cjRwREwvOVFkSXdGRG13WU5qeHM2eHJlc0Z6aVpNL0NEY2dqZjFDcDFkbzRyWTZiMyt5STBGK1UvTlFjTVNuNkF6M2JQYjVPcHdHVVNrS1hjbHZpUFp5VWhKL0Vxd2hSeDhFWkdBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd9a428-dee1-4175-aa41-b5f6324e4b60", "record_id": "flaws_cloudtrail:0000333:9dd9a428-dee1-4175-aa41-b5f6324e4b60", "row_index": 333, "timestamp": "2019-06-13T19:42:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd9a428-dee1-4175-aa41-b5f6324e4b60", "eventTime": "2019-06-13T19:42:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBaTZSVFNiM3dQMVBBWldVenpaNkxSUHRmS0svWlcyVFlBOWFFMU4ySUdNLzZGMHBhdWJEaDdVa254NjU0S0Y1bTJkbWtva0VLOUxzU2FDNjJVNHVSSnhwK3VqeWdMVktBOXVTZE94cXRwdllYTG9IZytyRXpvcmVjRjVNWFBielBQRTluelI1OUtUWGRTbE9MSDFuRVFUYkYraVU4NkR4dGxPdGpwVzhuR3JvcWMySDFINms2ZEpoZ2EwT3orYmJ5RTl0c1ZtZzkwZWdUbUtBcVI4c2pGRFJ6L1VlTGdFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd9a428-dee1-4175-aa41-b5f6324e4b60", "record_id": "flaws_cloudtrail:0000334:9dd9a428-dee1-4175-aa41-b5f6324e4b60", "row_index": 334, "timestamp": "2019-06-13T19:42:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd9a428-dee1-4175-aa41-b5f6324e4b60", "eventTime": "2019-06-13T19:42:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBaTZSVFNiM3dQMVBBWldVenpaNkxSUHRmS0svWlcyVFlBOWFFMU4ySUdNLzZGMHBhdWJEaDdVa254NjU0S0Y1bTJkbWtva0VLOUxzU2FDNjJVNHVSSnhwK3VqeWdMVktBOXVTZE94cXRwdllYTG9IZytyRXpvcmVjRjVNWFBielBQRTluelI1OUtUWGRTbE9MSDFuRVFUYkYraVU4NkR4dGxPdGpwVzhuR3JvcWMySDFINms2ZEpoZ2EwT3orYmJ5RTl0c1ZtZzkwZWdUbUtBcVI4c2pGRFJ6L1VlTGdFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2dbd8e-23d3-4dbb-aaeb-47a974972839", "record_id": "flaws_cloudtrail:0000335:ba2dbd8e-23d3-4dbb-aaeb-47a974972839", "row_index": 335, "timestamp": "2019-06-13T19:42:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2dbd8e-23d3-4dbb-aaeb-47a974972839", "eventTime": "2019-06-13T19:42:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSUGVsTTF0ckc0SEhkRnNFUlFSQ3VIdHByM1pCcGVyZ3FEUmdEai9UU1MrU3BFVG1yNnZGakdadEFmZ0tYam5JQ24rS09kT2UrdFAvRytOYnVYdXBaNzZkTk1LRnZZdnhoVUtzS09Ed1A3MFNEYnZvNEsyWWJaUWNjSTNBazVLK2hKd3lTcHBuL0pxM0oxUWltM0hPQVMxdi9oejZMRVBaUUV2MjUvZG9xbUQ2dEJ2MldVQmtNUVNlWmNIQnZqMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2dbd8e-23d3-4dbb-aaeb-47a974972839", "record_id": "flaws_cloudtrail:0000336:ba2dbd8e-23d3-4dbb-aaeb-47a974972839", "row_index": 336, "timestamp": "2019-06-13T19:42:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2dbd8e-23d3-4dbb-aaeb-47a974972839", "eventTime": "2019-06-13T19:42:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSUGVsTTF0ckc0SEhkRnNFUlFSQ3VIdHByM1pCcGVyZ3FEUmdEai9UU1MrU3BFVG1yNnZGakdadEFmZ0tYam5JQ24rS09kT2UrdFAvRytOYnVYdXBaNzZkTk1LRnZZdnhoVUtzS09Ed1A3MFNEYnZvNEsyWWJaUWNjSTNBazVLK2hKd3lTcHBuL0pxM0oxUWltM0hPQVMxdi9oejZMRVBaUUV2MjUvZG9xbUQ2dEJ2MldVQmtNUVNlWmNIQnZqMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e42f17b2-61eb-4865-bfdf-c50cd6e57e19", "record_id": "flaws_cloudtrail:0000337:e42f17b2-61eb-4865-bfdf-c50cd6e57e19", "row_index": 337, "timestamp": "2019-06-13T19:42:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e42f17b2-61eb-4865-bfdf-c50cd6e57e19", "eventTime": "2019-06-13T19:42:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e42f17b2-61eb-4865-bfdf-c50cd6e57e19", "record_id": "flaws_cloudtrail:0000338:e42f17b2-61eb-4865-bfdf-c50cd6e57e19", "row_index": 338, "timestamp": "2019-06-13T19:42:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e42f17b2-61eb-4865-bfdf-c50cd6e57e19", "eventTime": "2019-06-13T19:42:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d473c43-f146-4ddf-bdbf-0f51a9250e5f", "record_id": "flaws_cloudtrail:0000339:0d473c43-f146-4ddf-bdbf-0f51a9250e5f", "row_index": 339, "timestamp": "2019-06-13T19:46:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d473c43-f146-4ddf-bdbf-0f51a9250e5f", "eventTime": "2019-06-13T19:46:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d473c43-f146-4ddf-bdbf-0f51a9250e5f", "record_id": "flaws_cloudtrail:0000340:0d473c43-f146-4ddf-bdbf-0f51a9250e5f", "row_index": 340, "timestamp": "2019-06-13T19:46:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d473c43-f146-4ddf-bdbf-0f51a9250e5f", "eventTime": "2019-06-13T19:46:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df1adf90-7d15-42be-8ebe-66b7e493bee0", "record_id": "flaws_cloudtrail:0000341:df1adf90-7d15-42be-8ebe-66b7e493bee0", "row_index": 341, "timestamp": "2019-06-13T19:53:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df1adf90-7d15-42be-8ebe-66b7e493bee0", "eventTime": "2019-06-13T19:53:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df1adf90-7d15-42be-8ebe-66b7e493bee0", "record_id": "flaws_cloudtrail:0000342:df1adf90-7d15-42be-8ebe-66b7e493bee0", "row_index": 342, "timestamp": "2019-06-13T19:53:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.82.250.175", "user_agent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df1adf90-7d15-42be-8ebe-66b7e493bee0", "eventTime": "2019-06-13T19:53:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.82.250.175", "userAgent": "aws-cli/1.14.34 Python/2.7.10 Darwin/17.7.0 botocore/1.9.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "257b8eb8-6a2b-4c2f-a9ac-4deb386c42ca", "record_id": "flaws_cloudtrail:0000343:257b8eb8-6a2b-4c2f-a9ac-4deb386c42ca", "row_index": 343, "timestamp": "2019-06-13T20:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "257b8eb8-6a2b-4c2f-a9ac-4deb386c42ca", "eventTime": "2019-06-13T20:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW6OJDOU8KBTH5A66", "expiration": "Jun 14, 2019 2:41:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "257b8eb8-6a2b-4c2f-a9ac-4deb386c42ca", "record_id": "flaws_cloudtrail:0000344:257b8eb8-6a2b-4c2f-a9ac-4deb386c42ca", "row_index": 344, "timestamp": "2019-06-13T20:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "257b8eb8-6a2b-4c2f-a9ac-4deb386c42ca", "eventTime": "2019-06-13T20:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW6OJDOU8KBTH5A66", "expiration": "Jun 14, 2019 2:41:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c59b84d3-6c06-4f37-81d1-5ac22fcfc09d", "record_id": "flaws_cloudtrail:0000345:c59b84d3-6c06-4f37-81d1-5ac22fcfc09d", "row_index": 345, "timestamp": "2019-06-13T20:44:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c59b84d3-6c06-4f37-81d1-5ac22fcfc09d", "eventTime": "2019-06-13T20:44:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS74QHM1R758880X3", "expiration": "Jun 14, 2019 8:44:36 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7122a961-f961-4e66-9646-956de43264", "record_id": "flaws_cloudtrail:0000346:7122a961-f961-4e66-9646-956de43264", "row_index": 346, "timestamp": "2019-06-13T20:44:36Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA4K58EEKY2TESF8CC", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "220.25.252.97", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7122a961-f961-4e66-9646-956de43264", "eventTime": "2019-06-13T20:44:36Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.25.252.97", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4K58EEKY2TESF8CC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T20:44:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/13/[$LATEST]da51efa2eef7a223e27c6facc24b7ee0", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c44752d6-2f61-432c-80f9-b11c0087cabc", "record_id": "flaws_cloudtrail:0000347:c44752d6-2f61-432c-80f9-b11c0087cabc", "row_index": 347, "timestamp": "2019-06-13T20:44:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1624, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c44752d6-2f61-432c-80f9-b11c0087cabc", "eventTime": "2019-06-13T20:44:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4K58EEKY2TESF8CC", "expiration": "Jun 14, 2019 8:44:36 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c59b84d3-6c06-4f37-81d1-5ac22fcfc09d", "record_id": "flaws_cloudtrail:0000348:c59b84d3-6c06-4f37-81d1-5ac22fcfc09d", "row_index": 348, "timestamp": "2019-06-13T20:44:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c59b84d3-6c06-4f37-81d1-5ac22fcfc09d", "eventTime": "2019-06-13T20:44:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS74QHM1R758880X3", "expiration": "Jun 14, 2019 8:44:36 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7122a961-f961-4e66-9646-956de43264", "record_id": "flaws_cloudtrail:0000349:7122a961-f961-4e66-9646-956de43264", "row_index": 349, "timestamp": "2019-06-13T20:44:36Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA4K58EEKY2TESF8CC", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "220.25.252.97", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7122a961-f961-4e66-9646-956de43264", "eventTime": "2019-06-13T20:44:36Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.25.252.97", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4K58EEKY2TESF8CC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T20:44:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/13/[$LATEST]da51efa2eef7a223e27c6facc24b7ee0", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c44752d6-2f61-432c-80f9-b11c0087cabc", "record_id": "flaws_cloudtrail:0000350:c44752d6-2f61-432c-80f9-b11c0087cabc", "row_index": 350, "timestamp": "2019-06-13T20:44:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1624, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c44752d6-2f61-432c-80f9-b11c0087cabc", "eventTime": "2019-06-13T20:44:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4K58EEKY2TESF8CC", "expiration": "Jun 14, 2019 8:44:36 AM", "sessionToken": "AgoJb3JpZ2luX2VjELX//////////wEaCXVzLXdlc3QtMiJIMEYCIQDWnpLAijRmv6J49qQ7y5KMklTS1XpWEkK0F7ClrBngRwIhAP/eKMldp7WZs0fkQcow7ywmMD762l4+oWb4M3Cxpb83KosCCN7//////////wEQABoMOTc1NDI2MjYyMDI5Igxce+WFZLLcz1WM39gq3wE6SdwRcoSWxffZKPMT57KWD1WGaIqk39rB5OyhgF6ncXOzxaP9rgssOXAlVh3BsijRTUIMzcfwG/HoQvrb/1Kax2mlt3kkCU6vZ3C89qEUhrp+YVhgqKbPb7GzcYe2hLn9Ze4EhQifNNhPemg2LIPb+B/uWzvY5zy2/ckUvDXlIvlvElqU2RowiuFcoa2TQO/s6aPev9JIzd29d9m92RkPQ5V85ErfSAVoeBhIQvXWyXBpbsvVbKM06cXrLqHRTGluv49chwV5xXqDIRhDPTETaa5E1hMySwd2qkhZ6fudMLTriugFOrMBPat5EPcDx4CE5fyk+RyvJv25knowtdCic4nrxIW8msh+EdwIjRQPBLyoxYoF1smNUcMY8ql0VM027+A3zj1zvbjDCb4GNXqesibYUhnjkr4R3G28t0Uk73sNl3s8sDIhE6URnjTkDRTlVMCwOqpcCfxyiRwfDYIxPSgDV4pH4z3YC0vsv5DhnyJfyFGneP/2Gf7NNyLg2ziLNVSJ7JOCEFpIty/gDukVi/1RC46xLe2J+us="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f3e1aee-639a-4e3c-8876-420db58a34c7", "record_id": "flaws_cloudtrail:0000351:5f3e1aee-639a-4e3c-8876-420db58a34c7", "row_index": 351, "timestamp": "2019-06-13T21:07:30Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f3e1aee-639a-4e3c-8876-420db58a34c7", "eventTime": "2019-06-13T21:07:30Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f3e1aee-639a-4e3c-8876-420db58a34c7", "record_id": "flaws_cloudtrail:0000352:5f3e1aee-639a-4e3c-8876-420db58a34c7", "row_index": 352, "timestamp": "2019-06-13T21:07:30Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f3e1aee-639a-4e3c-8876-420db58a34c7", "eventTime": "2019-06-13T21:07:30Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405a2936-071e-40d4-a438-98db9b360195", "record_id": "flaws_cloudtrail:0000353:405a2936-071e-40d4-a438-98db9b360195", "row_index": 353, "timestamp": "2019-06-13T21:11:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405a2936-071e-40d4-a438-98db9b360195", "eventTime": "2019-06-13T21:11:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405a2936-071e-40d4-a438-98db9b360195", "record_id": "flaws_cloudtrail:0000354:405a2936-071e-40d4-a438-98db9b360195", "row_index": 354, "timestamp": "2019-06-13T21:11:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405a2936-071e-40d4-a438-98db9b360195", "eventTime": "2019-06-13T21:11:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1597e68c-7f13-4071-b3c7-096baf0ef960", "record_id": "flaws_cloudtrail:0000355:1597e68c-7f13-4071-b3c7-096baf0ef960", "row_index": 355, "timestamp": "2019-06-13T21:13:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1597e68c-7f13-4071-b3c7-096baf0ef960", "eventTime": "2019-06-13T21:13:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1597e68c-7f13-4071-b3c7-096baf0ef960", "record_id": "flaws_cloudtrail:0000356:1597e68c-7f13-4071-b3c7-096baf0ef960", "row_index": 356, "timestamp": "2019-06-13T21:13:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1597e68c-7f13-4071-b3c7-096baf0ef960", "eventTime": "2019-06-13T21:13:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbff92ad-c615-4660-84fb-977e794fa6a4", "record_id": "flaws_cloudtrail:0000357:cbff92ad-c615-4660-84fb-977e794fa6a4", "row_index": 357, "timestamp": "2019-06-13T21:13:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbff92ad-c615-4660-84fb-977e794fa6a4", "eventTime": "2019-06-13T21:13:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaaHVkN3QwcXk0bWUzQ0U2ZERyNHVUR0hCYSt0NEZ5eGxqRmpQWHZsd2lmakd6U1NpbCthVWNCT3VGVW9RWmt0QnNZbkVhVmVlNmk4UTFYZm42MTBOaXlFZFBjQ1hqRlQ5bnBMTHpLTVFiR2xsRTNYajJzSHFVVHhCb1F3LzZBVlk0ckFUVDdqY3hvMFEzYVp5QXNOeVVnVVlEQmcrOVhzSGp4ZlFPSDM0WWZkMTRCYTV3TVlpclp4bWFFNTE4WlMvd3MyS3pNdERBZ09tQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbff92ad-c615-4660-84fb-977e794fa6a4", "record_id": "flaws_cloudtrail:0000358:cbff92ad-c615-4660-84fb-977e794fa6a4", "row_index": 358, "timestamp": "2019-06-13T21:13:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbff92ad-c615-4660-84fb-977e794fa6a4", "eventTime": "2019-06-13T21:13:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaaHVkN3QwcXk0bWUzQ0U2ZERyNHVUR0hCYSt0NEZ5eGxqRmpQWHZsd2lmakd6U1NpbCthVWNCT3VGVW9RWmt0QnNZbkVhVmVlNmk4UTFYZm42MTBOaXlFZFBjQ1hqRlQ5bnBMTHpLTVFiR2xsRTNYajJzSHFVVHhCb1F3LzZBVlk0ckFUVDdqY3hvMFEzYVp5QXNOeVVnVVlEQmcrOVhzSGp4ZlFPSDM0WWZkMTRCYTV3TVlpclp4bWFFNTE4WlMvd3MyS3pNdERBZ09tQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a03cdb6-fd1c-426f-b8d0-1ff2e800052ab", "record_id": "flaws_cloudtrail:0000359:7a03cdb6-fd1c-426f-b8d0-1ff2e800052ab", "row_index": 359, "timestamp": "2019-06-13T21:13:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a03cdb6-fd1c-426f-b8d0-1ff2e800052ab", "eventTime": "2019-06-13T21:13:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwQlEzRlplUzVlSk8wK0xzSXBBUmlNNHlIeVh0TFJ0RUQwd3lWU0NHb2E4L1k5U2c0bTdoM0FlUTJ2aG0zeCtncUNycU1qYXdGS2FzamJJaFhzN1pwU3JBNi9CZS9IOUtCbHdTKzNCdXRJZ1gwQ3BHakNXMEVjeFB4ZTVTajd3bTFUZGplS0RKWFZ6Ym1nNldad055bFBvVG4vYkNPeUt0SmtCRXUwaWx1aElUZHptL1IwVDRrN3hDTkpZa29CWEN6L3luWjVaUi9sM0NaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a03cdb6-fd1c-426f-b8d0-1ff2e800052ab", "record_id": "flaws_cloudtrail:0000360:7a03cdb6-fd1c-426f-b8d0-1ff2e800052ab", "row_index": 360, "timestamp": "2019-06-13T21:13:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a03cdb6-fd1c-426f-b8d0-1ff2e800052ab", "eventTime": "2019-06-13T21:13:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwQlEzRlplUzVlSk8wK0xzSXBBUmlNNHlIeVh0TFJ0RUQwd3lWU0NHb2E4L1k5U2c0bTdoM0FlUTJ2aG0zeCtncUNycU1qYXdGS2FzamJJaFhzN1pwU3JBNi9CZS9IOUtCbHdTKzNCdXRJZ1gwQ3BHakNXMEVjeFB4ZTVTajd3bTFUZGplS0RKWFZ6Ym1nNldad055bFBvVG4vYkNPeUt0SmtCRXUwaWx1aElUZHptL1IwVDRrN3hDTkpZa29CWEN6L3luWjVaUi9sM0NaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba0d3ecd-ca88-4084-9c7e-f28ff17e73cb", "record_id": "flaws_cloudtrail:0000361:ba0d3ecd-ca88-4084-9c7e-f28ff17e73cb", "row_index": 361, "timestamp": "2019-06-13T21:13:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba0d3ecd-ca88-4084-9c7e-f28ff17e73cb", "eventTime": "2019-06-13T21:13:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGSS9LMDdZV2VqUUw0eVMxaVpKNlhLWnpCK3BDbDlUZjVUQXBNSmxFemhmNW5pNzRiTU5pY0FZOEZXaTFwR0RLZWFrUFNlY01jR0MzTnlHRmFyWjcvSjJDQjNGbW4wVWxNYkpkcGxHa28wU0dBdXZuWVp2N1R5dHJob1dvaUhCSjcraTZIdG1sTW91bGFGR0Zpc09vSVVOcVFIYkdWOVdqOUl5NmVpUnpJZTJiWUgrRWRsNi9ncThKNTY2OHoxQmNTQXdtQXhPd05nRHczUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba0d3ecd-ca88-4084-9c7e-f28ff17e73cb", "record_id": "flaws_cloudtrail:0000362:ba0d3ecd-ca88-4084-9c7e-f28ff17e73cb", "row_index": 362, "timestamp": "2019-06-13T21:13:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba0d3ecd-ca88-4084-9c7e-f28ff17e73cb", "eventTime": "2019-06-13T21:13:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGSS9LMDdZV2VqUUw0eVMxaVpKNlhLWnpCK3BDbDlUZjVUQXBNSmxFemhmNW5pNzRiTU5pY0FZOEZXaTFwR0RLZWFrUFNlY01jR0MzTnlHRmFyWjcvSjJDQjNGbW4wVWxNYkpkcGxHa28wU0dBdXZuWVp2N1R5dHJob1dvaUhCSjcraTZIdG1sTW91bGFGR0Zpc09vSVVOcVFIYkdWOVdqOUl5NmVpUnpJZTJiWUgrRWRsNi9ncThKNTY2OHoxQmNTQXdtQXhPd05nRHczUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7237c92-8ae7-4e1c-a575-64a2bb289054b", "record_id": "flaws_cloudtrail:0000363:f7237c92-8ae7-4e1c-a575-64a2bb289054b", "row_index": 363, "timestamp": "2019-06-13T21:13:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7237c92-8ae7-4e1c-a575-64a2bb289054b", "eventTime": "2019-06-13T21:13:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFem54b0FyY0d1MGQyM1lQTWxUdmF1TCtFQ1BRVmNKTEJnVkZoRDJZNDRxKzRrcFhpN3M0elh1WTh4aDJreDBMVzdja2NxWHUvbmM1QzVlRTlwUCt2RjZ2eE5JSUpEVXU4UWJ1VitlamRuc0IyclRuSm1rcFVWOU9ZOW9BbVlBSGluZUlQMGpqL3ROcWZDZEo2eER6WkxBWjM1QXgrYkljTHJpT3lWUE9DTy9heUhPM2M5bEp6N1VpbzFVTWZPL3F1Yi8wSEpQYiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7237c92-8ae7-4e1c-a575-64a2bb289054b", "record_id": "flaws_cloudtrail:0000364:f7237c92-8ae7-4e1c-a575-64a2bb289054b", "row_index": 364, "timestamp": "2019-06-13T21:13:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7237c92-8ae7-4e1c-a575-64a2bb289054b", "eventTime": "2019-06-13T21:13:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFem54b0FyY0d1MGQyM1lQTWxUdmF1TCtFQ1BRVmNKTEJnVkZoRDJZNDRxKzRrcFhpN3M0elh1WTh4aDJreDBMVzdja2NxWHUvbmM1QzVlRTlwUCt2RjZ2eE5JSUpEVXU4UWJ1VitlamRuc0IyclRuSm1rcFVWOU9ZOW9BbVlBSGluZUlQMGpqL3ROcWZDZEo2eER6WkxBWjM1QXgrYkljTHJpT3lWUE9DTy9heUhPM2M5bEp6N1VpbzFVTWZPL3F1Yi8wSEpQYiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a222d9-8fd8-4378-b990-001d919f35b8", "record_id": "flaws_cloudtrail:0000365:10a222d9-8fd8-4378-b990-001d919f35b8", "row_index": 365, "timestamp": "2019-06-13T21:13:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a222d9-8fd8-4378-b990-001d919f35b8", "eventTime": "2019-06-13T21:13:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXTms4V0JJWTRzNXl0dktUbThmRTNmVzJGUitaMHN4Qk9oUHc5S3NaVExrS3FRYTVMdHVxaWkzcGVVbWNSWGUya3lMeTV3czJtMzMzVzFjV3dmQW15RnlsejVDejNvQldueUpOQSt4VlhWeHRZa1J6UkwxcE1hd2g3UGdMNzRTY2MySElIYVg0MXdHRGI3Um12cGNmenNpMzg1U3g1a0NGZ2tHRjRkRURDQTlZRG9qUmhVaTJkZVc2MVVnL0NJWnJ6bUh6OGRzRlJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a222d9-8fd8-4378-b990-001d919f35b8", "record_id": "flaws_cloudtrail:0000366:10a222d9-8fd8-4378-b990-001d919f35b8", "row_index": 366, "timestamp": "2019-06-13T21:13:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a222d9-8fd8-4378-b990-001d919f35b8", "eventTime": "2019-06-13T21:13:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXTms4V0JJWTRzNXl0dktUbThmRTNmVzJGUitaMHN4Qk9oUHc5S3NaVExrS3FRYTVMdHVxaWkzcGVVbWNSWGUya3lMeTV3czJtMzMzVzFjV3dmQW15RnlsejVDejNvQldueUpOQSt4VlhWeHRZa1J6UkwxcE1hd2g3UGdMNzRTY2MySElIYVg0MXdHRGI3Um12cGNmenNpMzg1U3g1a0NGZ2tHRjRkRURDQTlZRG9qUmhVaTJkZVc2MVVnL0NJWnJ6bUh6OGRzRlJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb38468-0156-419f-8d9d-04325bd88cd4", "record_id": "flaws_cloudtrail:0000367:fb38468-0156-419f-8d9d-04325bd88cd4", "row_index": 367, "timestamp": "2019-06-13T21:13:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb38468-0156-419f-8d9d-04325bd88cd4", "eventTime": "2019-06-13T21:13:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRVXFpQkhGaDYrUm5YRlFlSTNWUWtvbEVnQUxoWXJBendhT1FnOUtvbjFhbVdLK2s4b0xveVFyK3RvZXVNdlAvVXJSME1HdU0wVElDeS92bjdPTytYVmhkWUNaNXQzazFWbGV3ZFNZMTdyMzUxeXJxUXNwRUo0Q2pYeUsyb0s0dlZXVGtaQXFKNlZxSUtPNUkvQVpISktrbC84SUt4cE1Sa3NPN2VwUTQwTEk5Z1drOEYvZWg2M09tSU9YZ0NDWFQ1RGVXT0xnYUhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb38468-0156-419f-8d9d-04325bd88cd4", "record_id": "flaws_cloudtrail:0000368:fb38468-0156-419f-8d9d-04325bd88cd4", "row_index": 368, "timestamp": "2019-06-13T21:13:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb38468-0156-419f-8d9d-04325bd88cd4", "eventTime": "2019-06-13T21:13:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRVXFpQkhGaDYrUm5YRlFlSTNWUWtvbEVnQUxoWXJBendhT1FnOUtvbjFhbVdLK2s4b0xveVFyK3RvZXVNdlAvVXJSME1HdU0wVElDeS92bjdPTytYVmhkWUNaNXQzazFWbGV3ZFNZMTdyMzUxeXJxUXNwRUo0Q2pYeUsyb0s0dlZXVGtaQXFKNlZxSUtPNUkvQVpISktrbC84SUt4cE1Sa3NPN2VwUTQwTEk5Z1drOEYvZWg2M09tSU9YZ0NDWFQ1RGVXT0xnYUhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df48c09a-d30f-4a8b-9e5c-9ac71e23a98a", "record_id": "flaws_cloudtrail:0000369:df48c09a-d30f-4a8b-9e5c-9ac71e23a98a", "row_index": 369, "timestamp": "2019-06-13T21:13:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df48c09a-d30f-4a8b-9e5c-9ac71e23a98a", "eventTime": "2019-06-13T21:13:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlaEJMd2NSM0RwK2cvNjJkZDFKN3hHdkU3V0Q0REFmc0paWU9hWnVoOGlhN0QxVjNiSmN2U2NSa2VEem1Wd0psTGh3d0VaaXI0WFA2OXJrUjUyYitEaGxya3VrMXZJSXR2ZEc2UjN5cnlST2FLWjlFQitzWDhqVkdkNHo2SHBheExWNkFJZHRYd21aMzhnOEJtNlRRWVd6dktPUXVCZTJ4Z3VrdCtIT3gwVDU3UDB6czI2bHV3Y2krQjcxOWJvNkJONk1EMXdVNzlmQlNrUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df48c09a-d30f-4a8b-9e5c-9ac71e23a98a", "record_id": "flaws_cloudtrail:0000370:df48c09a-d30f-4a8b-9e5c-9ac71e23a98a", "row_index": 370, "timestamp": "2019-06-13T21:13:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df48c09a-d30f-4a8b-9e5c-9ac71e23a98a", "eventTime": "2019-06-13T21:13:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlaEJMd2NSM0RwK2cvNjJkZDFKN3hHdkU3V0Q0REFmc0paWU9hWnVoOGlhN0QxVjNiSmN2U2NSa2VEem1Wd0psTGh3d0VaaXI0WFA2OXJrUjUyYitEaGxya3VrMXZJSXR2ZEc2UjN5cnlST2FLWjlFQitzWDhqVkdkNHo2SHBheExWNkFJZHRYd21aMzhnOEJtNlRRWVd6dktPUXVCZTJ4Z3VrdCtIT3gwVDU3UDB6czI2bHV3Y2krQjcxOWJvNkJONk1EMXdVNzlmQlNrUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a92983-7f64-4ea1-a862-6b923657c3308", "record_id": "flaws_cloudtrail:0000371:0a92983-7f64-4ea1-a862-6b923657c3308", "row_index": 371, "timestamp": "2019-06-13T21:13:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a92983-7f64-4ea1-a862-6b923657c3308", "eventTime": "2019-06-13T21:13:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHNGxEWjlPOGgzY1UxNVJrOXFXbHBEMi9JUU1TMWQxK05UZEJoOW52U1dkYVBURXhNQVA1TjlQbVdINWlRQ2xoU1RoWEtxRUdwL21TdE80VGZndGdzWnBoNFl6RXp0Ym05TlFzVkNZTVh6QlVsSGRXZlhoZ2EyUzJxZ3RHbGQra3c3YW5vQnI5Y2N3TEpYOUlnWTRpOHNtZ0J1VWc1eXd6cUFkT2VPWVBqeU5aSDltcTZzalZkNE4xU2R6aThITXc1MHVINk0xWFhxdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a92983-7f64-4ea1-a862-6b923657c3308", "record_id": "flaws_cloudtrail:0000372:0a92983-7f64-4ea1-a862-6b923657c3308", "row_index": 372, "timestamp": "2019-06-13T21:13:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a92983-7f64-4ea1-a862-6b923657c3308", "eventTime": "2019-06-13T21:13:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHNGxEWjlPOGgzY1UxNVJrOXFXbHBEMi9JUU1TMWQxK05UZEJoOW52U1dkYVBURXhNQVA1TjlQbVdINWlRQ2xoU1RoWEtxRUdwL21TdE80VGZndGdzWnBoNFl6RXp0Ym05TlFzVkNZTVh6QlVsSGRXZlhoZ2EyUzJxZ3RHbGQra3c3YW5vQnI5Y2N3TEpYOUlnWTRpOHNtZ0J1VWc1eXd6cUFkT2VPWVBqeU5aSDltcTZzalZkNE4xU2R6aThITXc1MHVINk0xWFhxdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "507f79c1-2fca-42e8-9f2e-8aa127a4fdfe", "record_id": "flaws_cloudtrail:0000373:507f79c1-2fca-42e8-9f2e-8aa127a4fdfe", "row_index": 373, "timestamp": "2019-06-13T21:13:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "507f79c1-2fca-42e8-9f2e-8aa127a4fdfe", "eventTime": "2019-06-13T21:13:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkd2ZjSGRTUjVsUVYvRHlybisrU0NiYTV4ZGNDMjdKcmJsMk5YeEFyYXpvaWlwZ2VpUGhoNWI1enZ0eGpoRTUyMTYwaFRGcU0vMXdlcElYZThHVkRGeEU1NjVFOVJSaVQ5ZXlyY1ZqUkthWlNZUUJXckM4c0JXb29PTHNWQ2k5ZXZZbXNoODdyT0ZCRmJhdHR2QVIzU3VTaXdnaDhnYjZqS1BQb0JCSnlPQ0x4S0dmbE1kbyswQi9HUGVta2FrdWFHbGhjbG1VTjl1c2lOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "507f79c1-2fca-42e8-9f2e-8aa127a4fdfe", "record_id": "flaws_cloudtrail:0000374:507f79c1-2fca-42e8-9f2e-8aa127a4fdfe", "row_index": 374, "timestamp": "2019-06-13T21:13:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "507f79c1-2fca-42e8-9f2e-8aa127a4fdfe", "eventTime": "2019-06-13T21:13:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkd2ZjSGRTUjVsUVYvRHlybisrU0NiYTV4ZGNDMjdKcmJsMk5YeEFyYXpvaWlwZ2VpUGhoNWI1enZ0eGpoRTUyMTYwaFRGcU0vMXdlcElYZThHVkRGeEU1NjVFOVJSaVQ5ZXlyY1ZqUkthWlNZUUJXckM4c0JXb29PTHNWQ2k5ZXZZbXNoODdyT0ZCRmJhdHR2QVIzU3VTaXdnaDhnYjZqS1BQb0JCSnlPQ0x4S0dmbE1kbyswQi9HUGVta2FrdWFHbGhjbG1VTjl1c2lOUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd02bdd-7e35-43da-823a-710f151c709b", "record_id": "flaws_cloudtrail:0000375:4cd02bdd-7e35-43da-823a-710f151c709b", "row_index": 375, "timestamp": "2019-06-13T21:13:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd02bdd-7e35-43da-823a-710f151c709b", "eventTime": "2019-06-13T21:13:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwSTQxQTVSTGlQY0IzTFVZQkNJUDNmWkZCNitpNkxIcE9uTWRUTDlkQm01ckdRWWE2ZGthZ0JEQVRuWVp5c21yeHdsVFpTODVLQmRhOGxTdWJab0pjRUZuOWZ2NDgvTkw2Vk9haDFnT0hKUFduaGw0Rnh0ejNLeEdQZU93QXRZVWNOVUlZSHc5YXVGdWpPcDhMdWhqR2c2eUlLVVZKZ0twbzE5U0wwWGZWcGtrb1U0aURoNVF1ZHlhSTUrcHk5Y1FNdHhGUENZWU1xUzIzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd02bdd-7e35-43da-823a-710f151c709b", "record_id": "flaws_cloudtrail:0000376:4cd02bdd-7e35-43da-823a-710f151c709b", "row_index": 376, "timestamp": "2019-06-13T21:13:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd02bdd-7e35-43da-823a-710f151c709b", "eventTime": "2019-06-13T21:13:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwSTQxQTVSTGlQY0IzTFVZQkNJUDNmWkZCNitpNkxIcE9uTWRUTDlkQm01ckdRWWE2ZGthZ0JEQVRuWVp5c21yeHdsVFpTODVLQmRhOGxTdWJab0pjRUZuOWZ2NDgvTkw2Vk9haDFnT0hKUFduaGw0Rnh0ejNLeEdQZU93QXRZVWNOVUlZSHc5YXVGdWpPcDhMdWhqR2c2eUlLVVZKZ0twbzE5U0wwWGZWcGtrb1U0aURoNVF1ZHlhSTUrcHk5Y1FNdHhGUENZWU1xUzIzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb2f623c-e407-42ae-a70e-ba33fe3f66ac", "record_id": "flaws_cloudtrail:0000377:bb2f623c-e407-42ae-a70e-ba33fe3f66ac", "row_index": 377, "timestamp": "2019-06-13T21:13:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb2f623c-e407-42ae-a70e-ba33fe3f66ac", "eventTime": "2019-06-13T21:13:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUSUpET1pMWHI4M1FFa2lDdldRNUpjaDh0NmVqZUN6MXpHQTJPOWNHUmh1ejhjTDJTNmc4YWhtV2NPTUlzTXUyenFITUJWYzQyYUh0eEZKbVlVNkNxMXBVVExDb3Nab0QzL2tIWjJuNlFvekVyN2lMQzcvbXBEWXB3VENmVlFhWFdVTmp2WjRSWFpaOU9lbFJKRHppYUV1SXV5dnhCa2d2VXRKTndwUVZQTWxIbytTTW5ZZEtYZEx5N0k0RUJVSHVZSi9KZ0dkZ3lKd2ZvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb2f623c-e407-42ae-a70e-ba33fe3f66ac", "record_id": "flaws_cloudtrail:0000378:bb2f623c-e407-42ae-a70e-ba33fe3f66ac", "row_index": 378, "timestamp": "2019-06-13T21:13:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb2f623c-e407-42ae-a70e-ba33fe3f66ac", "eventTime": "2019-06-13T21:13:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUSUpET1pMWHI4M1FFa2lDdldRNUpjaDh0NmVqZUN6MXpHQTJPOWNHUmh1ejhjTDJTNmc4YWhtV2NPTUlzTXUyenFITUJWYzQyYUh0eEZKbVlVNkNxMXBVVExDb3Nab0QzL2tIWjJuNlFvekVyN2lMQzcvbXBEWXB3VENmVlFhWFdVTmp2WjRSWFpaOU9lbFJKRHppYUV1SXV5dnhCa2d2VXRKTndwUVZQTWxIbytTTW5ZZEtYZEx5N0k0RUJVSHVZSi9KZ0dkZ3lKd2ZvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb911618-bc06-4d31-b37f-3bf6d996a367", "record_id": "flaws_cloudtrail:0000379:ffb911618-bc06-4d31-b37f-3bf6d996a367", "row_index": 379, "timestamp": "2019-06-13T21:13:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb911618-bc06-4d31-b37f-3bf6d996a367", "eventTime": "2019-06-13T21:13:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMytYcklmellxWWh3eTNKcjdKN0VQL1RKdzIyWnU4ckFMeVU1K25ZNGZDU21DL0o2eVZkUUtnV0h6S0ZKOTFWdmxpMlBkcGxsaHUzYWhkb0hMVDNTOTc5RmxVUjhPMjRaeG13WE5QZ0lwOHZ5MlNuWlJFTEYrb1RKS2ZxZitWenoyZzdCOCtmU2haK0svNFhJWWZmRmxKVnlVTnpwMDJrQ2tPTE1nT2ZPL3Faak9TajZyNjZ3T2RXOHI5S1RjUDREOHpMVlRXWFNXST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "927193de4-95c1-4344-b963-654319d0602e9", "record_id": "flaws_cloudtrail:0000380:927193de4-95c1-4344-b963-654319d0602e9", "row_index": 380, "timestamp": "2019-06-13T21:13:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "927193de4-95c1-4344-b963-654319d0602e9", "eventTime": "2019-06-13T21:13:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIM1RRdmZpVWFLQkdnQ0syUmpkbmlJTmxIczVnbWk1Q2JFT0VlZjRxdXdub3FQTGFCSjJGdUJidDVKM2dMZEJVR3NvNGlTSlJOWHovQllwMkM5S052Zk5ZaldWS3h5LzE3bldyY1ZxajNHOXUveEk3UHVlYTVWSlVLcXk4aUNCYW1vcEUxTmlKYWRKcXZ6b3Vta01zMWlxM2p3SE9EQ05yQjRvTE8rWGUwTjFldlVPQUM3cWJiNzVvZ1l3d2JGK0tMdFJ6bVhtcEFtNEVaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb911618-bc06-4d31-b37f-3bf6d996a367", "record_id": "flaws_cloudtrail:0000381:ffb911618-bc06-4d31-b37f-3bf6d996a367", "row_index": 381, "timestamp": "2019-06-13T21:13:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb911618-bc06-4d31-b37f-3bf6d996a367", "eventTime": "2019-06-13T21:13:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvMytYcklmellxWWh3eTNKcjdKN0VQL1RKdzIyWnU4ckFMeVU1K25ZNGZDU21DL0o2eVZkUUtnV0h6S0ZKOTFWdmxpMlBkcGxsaHUzYWhkb0hMVDNTOTc5RmxVUjhPMjRaeG13WE5QZ0lwOHZ5MlNuWlJFTEYrb1RKS2ZxZitWenoyZzdCOCtmU2haK0svNFhJWWZmRmxKVnlVTnpwMDJrQ2tPTE1nT2ZPL3Faak9TajZyNjZ3T2RXOHI5S1RjUDREOHpMVlRXWFNXST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "927193de4-95c1-4344-b963-654319d0602e9", "record_id": "flaws_cloudtrail:0000382:927193de4-95c1-4344-b963-654319d0602e9", "row_index": 382, "timestamp": "2019-06-13T21:13:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "927193de4-95c1-4344-b963-654319d0602e9", "eventTime": "2019-06-13T21:13:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIM1RRdmZpVWFLQkdnQ0syUmpkbmlJTmxIczVnbWk1Q2JFT0VlZjRxdXdub3FQTGFCSjJGdUJidDVKM2dMZEJVR3NvNGlTSlJOWHovQllwMkM5S052Zk5ZaldWS3h5LzE3bldyY1ZxajNHOXUveEk3UHVlYTVWSlVLcXk4aUNCYW1vcEUxTmlKYWRKcXZ6b3Vta01zMWlxM2p3SE9EQ05yQjRvTE8rWGUwTjFldlVPQUM3cWJiNzVvZ1l3d2JGK0tMdFJ6bVhtcEFtNEVaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "164779-02e1-4667-86c4-85f815f1b835", "record_id": "flaws_cloudtrail:0000383:164779-02e1-4667-86c4-85f815f1b835", "row_index": 383, "timestamp": "2019-06-13T21:13:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "164779-02e1-4667-86c4-85f815f1b835", "eventTime": "2019-06-13T21:13:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RW5GY1Nxa0VGaFZsbTBqNmY4QW1PZHRuYVZnSi9xbTVTc21kZ3VtMFJScG0yVVRNdithRnJNVnpHbU1xSHZHZkdQOW1xRVRzd3BuNUdmUW9VaThxSHppTzVmcExGTjQ5b0lFdUJnSFVpaldFdzdlck13eGdVMnZabzhTbFJFSmErVDEvUUlwNitySndUMVA3M3pyY3hNd1p4eVhJNnRncVlzdlhha3ZCTFpFK3lOaEFMMFNtVTNUNXRoNUJ6Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21af3686-240a-404a-8df4-7f95cf01e3fd", "record_id": "flaws_cloudtrail:0000384:21af3686-240a-404a-8df4-7f95cf01e3fd", "row_index": 384, "timestamp": "2019-06-13T21:13:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21af3686-240a-404a-8df4-7f95cf01e3fd", "eventTime": "2019-06-13T21:13:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEYUxwbGxQL0E3S0NCd1gvUW9qRkNhZlEzRWRmRi9xSDBmQXdIRytJeDhveGJPTTN3c29XVHEwMnRnTHRTamlNR29KV2tYR1JLUVZ4U1h1aGloUisyRjNTdkhxQUpQL05LVXl2TG9XeU00ZkZ0bUZKcVFacXhWZmVlb0tOZlBoQllTSHhRU0pZY0VOcWNDU0NHdzVYZnNzaUJqRmZNTy9LeHZkRmh0cUlNUG90SVhNM0FlMTdUTXpkcUhTN29UM2x0azdTT0xtbkRJTVdJd2FnSitNTlp6cUhqWlJQOFdNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "164779-02e1-4667-86c4-85f815f1b835", "record_id": "flaws_cloudtrail:0000385:164779-02e1-4667-86c4-85f815f1b835", "row_index": 385, "timestamp": "2019-06-13T21:13:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "164779-02e1-4667-86c4-85f815f1b835", "eventTime": "2019-06-13T21:13:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RW5GY1Nxa0VGaFZsbTBqNmY4QW1PZHRuYVZnSi9xbTVTc21kZ3VtMFJScG0yVVRNdithRnJNVnpHbU1xSHZHZkdQOW1xRVRzd3BuNUdmUW9VaThxSHppTzVmcExGTjQ5b0lFdUJnSFVpaldFdzdlck13eGdVMnZabzhTbFJFSmErVDEvUUlwNitySndUMVA3M3pyY3hNd1p4eVhJNnRncVlzdlhha3ZCTFpFK3lOaEFMMFNtVTNUNXRoNUJ6Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21af3686-240a-404a-8df4-7f95cf01e3fd", "record_id": "flaws_cloudtrail:0000386:21af3686-240a-404a-8df4-7f95cf01e3fd", "row_index": 386, "timestamp": "2019-06-13T21:13:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21af3686-240a-404a-8df4-7f95cf01e3fd", "eventTime": "2019-06-13T21:13:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEYUxwbGxQL0E3S0NCd1gvUW9qRkNhZlEzRWRmRi9xSDBmQXdIRytJeDhveGJPTTN3c29XVHEwMnRnTHRTamlNR29KV2tYR1JLUVZ4U1h1aGloUisyRjNTdkhxQUpQL05LVXl2TG9XeU00ZkZ0bUZKcVFacXhWZmVlb0tOZlBoQllTSHhRU0pZY0VOcWNDU0NHdzVYZnNzaUJqRmZNTy9LeHZkRmh0cUlNUG90SVhNM0FlMTdUTXpkcUhTN29UM2x0azdTT0xtbkRJTVdJd2FnSitNTlp6cUhqWlJQOFdNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6c0e2e8-a853-436e-a476-dffdbdf81bd5", "record_id": "flaws_cloudtrail:0000387:c6c0e2e8-a853-436e-a476-dffdbdf81bd5", "row_index": 387, "timestamp": "2019-06-13T21:13:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6c0e2e8-a853-436e-a476-dffdbdf81bd5", "eventTime": "2019-06-13T21:13:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHMGpHWk9DZkZDMlJZdG93YXNQRXVTWG1Hczk4L3QwSXR6djhUMThpR0tRdEZWL1NtaSswa0VCeVpnWHF5VW4rYTJoaGpaaHMzWTYzbkJuNU1wUElaZFp0Rk5jVjh2NEtxRTJMU1I3UVZaZ1diR2tsTXZ0c2ZWWFF3cWtuODNpTnJLOWtZZ2RUWnhKakY1WGN3UDU4ZlFJVzY3TlE4SlJ5MWRxMjJZbHZFNnR2d003eG0vMzNFQmJvM2Q2Vk55OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe2c397-4d39-4db2-9544-50633ad08f", "record_id": "flaws_cloudtrail:0000388:4fe2c397-4d39-4db2-9544-50633ad08f", "row_index": 388, "timestamp": "2019-06-13T21:13:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe2c397-4d39-4db2-9544-50633ad08f", "eventTime": "2019-06-13T21:13:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIreUtlRzB4THpORzZrTE9maDVKaUs1aW5wc0xpRFNPNVFjVUFEOE5UUlVYekJwV2VqWm5GSzhyOStFRTI2VnNTVWhaVndvUUJTSUNsZ2c5bGpmYUlMVGh4UWJZRmsxdzVhWjY3ZFNHVW0xalloTi9nb3hPV0gzakx6V1BrRmNESlZzeEIrZy9mS3kwbXh1WEcvZGlFR1pyNE8zZ1RHZ1JRTUMzQ1Njcy85L0dudk5oRmhWSFpJU0swa1hoNVhaeXZ5ZVN3M2dlVi9ERk1Vc1FyaGNiMHRLd1N2NjVMbjgwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6c0e2e8-a853-436e-a476-dffdbdf81bd5", "record_id": "flaws_cloudtrail:0000389:c6c0e2e8-a853-436e-a476-dffdbdf81bd5", "row_index": 389, "timestamp": "2019-06-13T21:13:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6c0e2e8-a853-436e-a476-dffdbdf81bd5", "eventTime": "2019-06-13T21:13:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHMGpHWk9DZkZDMlJZdG93YXNQRXVTWG1Hczk4L3QwSXR6djhUMThpR0tRdEZWL1NtaSswa0VCeVpnWHF5VW4rYTJoaGpaaHMzWTYzbkJuNU1wUElaZFp0Rk5jVjh2NEtxRTJMU1I3UVZaZ1diR2tsTXZ0c2ZWWFF3cWtuODNpTnJLOWtZZ2RUWnhKakY1WGN3UDU4ZlFJVzY3TlE4SlJ5MWRxMjJZbHZFNnR2d003eG0vMzNFQmJvM2Q2Vk55OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe2c397-4d39-4db2-9544-50633ad08f", "record_id": "flaws_cloudtrail:0000390:4fe2c397-4d39-4db2-9544-50633ad08f", "row_index": 390, "timestamp": "2019-06-13T21:13:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe2c397-4d39-4db2-9544-50633ad08f", "eventTime": "2019-06-13T21:13:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIreUtlRzB4THpORzZrTE9maDVKaUs1aW5wc0xpRFNPNVFjVUFEOE5UUlVYekJwV2VqWm5GSzhyOStFRTI2VnNTVWhaVndvUUJTSUNsZ2c5bGpmYUlMVGh4UWJZRmsxdzVhWjY3ZFNHVW0xalloTi9nb3hPV0gzakx6V1BrRmNESlZzeEIrZy9mS3kwbXh1WEcvZGlFR1pyNE8zZ1RHZ1JRTUMzQ1Njcy85L0dudk5oRmhWSFpJU0swa1hoNVhaeXZ5ZVN3M2dlVi9ERk1Vc1FyaGNiMHRLd1N2NjVMbjgwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "290a8fb5-1e01-4ab2-adf4-d5acb457b964", "record_id": "flaws_cloudtrail:0000391:290a8fb5-1e01-4ab2-adf4-d5acb457b964", "row_index": 391, "timestamp": "2019-06-13T21:13:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "290a8fb5-1e01-4ab2-adf4-d5acb457b964", "eventTime": "2019-06-13T21:13:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5allJdlRPQllDd2NDVVk4QWVkSXZSaCtHSEREakg4dEE5SlNaK2tkTXd3QkpTbjBuTHlyZ0NOS3d5MVhQNmJMM1dUTDV2b29saHRvblFvMm45c05Uem1ld1Nzc1d5WkNtRmY3WTE2T0M4MDZOQXczekpOQysvOU9TMlNxY2R1RzV1eTIza1lIZy9VeTJTSUU0ZE9Gang4a25uaitoU09UemozK2FsbG5Jd3dFUzQ4aVdrbmhDdXhsQ25SanFYYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfc22c44-e57c-4197-a1c4-498c22c66679", "record_id": "flaws_cloudtrail:0000392:bfc22c44-e57c-4197-a1c4-498c22c66679", "row_index": 392, "timestamp": "2019-06-13T21:13:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfc22c44-e57c-4197-a1c4-498c22c66679", "eventTime": "2019-06-13T21:13:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtc2g2YTlsQkRhRU8ySVdreFhOM2kwcXZuUm5GbzdIVUZIZ1NnV0tGL0RkRzBRSWRUamFERHRHQUxpaFBaemFJekFsbU52TDl0NG9aZFBneVZjMXRFNk9UT0s1SldNYUQwRURDVGVHcVAvNkc1dG5VUWk2U0UzcnI3QTBwelRQSEptcGRJWS94VExwVDBrS3ZnNEFQOFp6Z1NVVGtLYk9SYmpBUXpNT3FFSUU3VW04L3VRL3JnNlBiOXgyWmgxeTRhdDBiREJhZDlvRUV3MmJOampnK3F5MDNQNW14T3M0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "290a8fb5-1e01-4ab2-adf4-d5acb457b964", "record_id": "flaws_cloudtrail:0000393:290a8fb5-1e01-4ab2-adf4-d5acb457b964", "row_index": 393, "timestamp": "2019-06-13T21:13:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "290a8fb5-1e01-4ab2-adf4-d5acb457b964", "eventTime": "2019-06-13T21:13:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5allJdlRPQllDd2NDVVk4QWVkSXZSaCtHSEREakg4dEE5SlNaK2tkTXd3QkpTbjBuTHlyZ0NOS3d5MVhQNmJMM1dUTDV2b29saHRvblFvMm45c05Uem1ld1Nzc1d5WkNtRmY3WTE2T0M4MDZOQXczekpOQysvOU9TMlNxY2R1RzV1eTIza1lIZy9VeTJTSUU0ZE9Gang4a25uaitoU09UemozK2FsbG5Jd3dFUzQ4aVdrbmhDdXhsQ25SanFYYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfc22c44-e57c-4197-a1c4-498c22c66679", "record_id": "flaws_cloudtrail:0000394:bfc22c44-e57c-4197-a1c4-498c22c66679", "row_index": 394, "timestamp": "2019-06-13T21:13:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfc22c44-e57c-4197-a1c4-498c22c66679", "eventTime": "2019-06-13T21:13:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtc2g2YTlsQkRhRU8ySVdreFhOM2kwcXZuUm5GbzdIVUZIZ1NnV0tGL0RkRzBRSWRUamFERHRHQUxpaFBaemFJekFsbU52TDl0NG9aZFBneVZjMXRFNk9UT0s1SldNYUQwRURDVGVHcVAvNkc1dG5VUWk2U0UzcnI3QTBwelRQSEptcGRJWS94VExwVDBrS3ZnNEFQOFp6Z1NVVGtLYk9SYmpBUXpNT3FFSUU3VW04L3VRL3JnNlBiOXgyWmgxeTRhdDBiREJhZDlvRUV3MmJOampnK3F5MDNQNW14T3M0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07ecd39c-e99d-4504-b633-121946ec1", "record_id": "flaws_cloudtrail:0000395:07ecd39c-e99d-4504-b633-121946ec1", "row_index": 395, "timestamp": "2019-06-13T21:13:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07ecd39c-e99d-4504-b633-121946ec1", "eventTime": "2019-06-13T21:13:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiV2dxWDhTYWE3YzYzbUVLQ05oeDRXVGU0aXdzV3pnR3Fjbkl2MkRpQ2dmOGhjQjZkeENaeUZLdWVUQmRscUxiQmJlckoyRUpJRzd2WVpVaFZ5cTF4aGYwa0RpMU9HZWNOS1I2emJibklFOXlWTlczRjVJSGRRVjZWeHlwYU9zRk9YTHk1QklQNWJiNlk2VUFId1FvOW8zcmJTTTFlVzRUekd2M3JzRVFUOU1TeDBxRUEyVmZOZVVpSlFQbkZVakFSaWppZnd0TWtyQkxmVFpSUnB1WC9qUCtxTGhTRkdNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805d9faa-58a6-4fde-8550-ed05208cd840", "record_id": "flaws_cloudtrail:0000396:805d9faa-58a6-4fde-8550-ed05208cd840", "row_index": 396, "timestamp": "2019-06-13T21:13:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805d9faa-58a6-4fde-8550-ed05208cd840", "eventTime": "2019-06-13T21:13:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJieGpVTGhsa1NUZEF3cHUvS1h0YnZwRm91R0ZYQW1uRWxHOHdjVjFIKysxSEpyTmxSSDNjcGhrOTRmdXl3cHhPSGJ0aGxxKzlnenFKbWwvbDBEaFR2Q0NYUy9lZ3dJUTFlQVlGTkhJamdoSnlUbFd1c05EZmNLRmtmRzNvVFU4cGxhWjdtNVJtdmxiSHVuVzdSYllWbzR3QlJjQ0Z1a1dzWkhENW5saFV5Z1lIeFMrM1h0T3ZHcmo5eGkzb2l1SWpOTWJjQk9kcTFvNndZVzZ2WW4rRzRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07ecd39c-e99d-4504-b633-121946ec1", "record_id": "flaws_cloudtrail:0000397:07ecd39c-e99d-4504-b633-121946ec1", "row_index": 397, "timestamp": "2019-06-13T21:13:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07ecd39c-e99d-4504-b633-121946ec1", "eventTime": "2019-06-13T21:13:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiV2dxWDhTYWE3YzYzbUVLQ05oeDRXVGU0aXdzV3pnR3Fjbkl2MkRpQ2dmOGhjQjZkeENaeUZLdWVUQmRscUxiQmJlckoyRUpJRzd2WVpVaFZ5cTF4aGYwa0RpMU9HZWNOS1I2emJibklFOXlWTlczRjVJSGRRVjZWeHlwYU9zRk9YTHk1QklQNWJiNlk2VUFId1FvOW8zcmJTTTFlVzRUekd2M3JzRVFUOU1TeDBxRUEyVmZOZVVpSlFQbkZVakFSaWppZnd0TWtyQkxmVFpSUnB1WC9qUCtxTGhTRkdNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805d9faa-58a6-4fde-8550-ed05208cd840", "record_id": "flaws_cloudtrail:0000398:805d9faa-58a6-4fde-8550-ed05208cd840", "row_index": 398, "timestamp": "2019-06-13T21:13:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805d9faa-58a6-4fde-8550-ed05208cd840", "eventTime": "2019-06-13T21:13:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJieGpVTGhsa1NUZEF3cHUvS1h0YnZwRm91R0ZYQW1uRWxHOHdjVjFIKysxSEpyTmxSSDNjcGhrOTRmdXl3cHhPSGJ0aGxxKzlnenFKbWwvbDBEaFR2Q0NYUy9lZ3dJUTFlQVlGTkhJamdoSnlUbFd1c05EZmNLRmtmRzNvVFU4cGxhWjdtNVJtdmxiSHVuVzdSYllWbzR3QlJjQ0Z1a1dzWkhENW5saFV5Z1lIeFMrM1h0T3ZHcmo5eGkzb2l1SWpOTWJjQk9kcTFvNndZVzZ2WW4rRzRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "746c9057-4bc9-46d0-a5dd-635c924e16f7", "record_id": "flaws_cloudtrail:0000399:746c9057-4bc9-46d0-a5dd-635c924e16f7", "row_index": 399, "timestamp": "2019-06-13T21:13:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "746c9057-4bc9-46d0-a5dd-635c924e16f7", "eventTime": "2019-06-13T21:13:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXM0YvR3lFWkE2dHVHY2VHcEpwVU9LYnNVb0RHTCs1Uk9IVDVCdVRjdFFQYlVaaVJWeG94a0ExQmpnWFF1TE1lUWh5UlVDbGVXOTNnUnlTZEp1VmFsaVAyRnF6enhzbytXSlVTbm4rWFBLcGZUOG5aZzgyRHozZ2Q3eGJZalhTTWhtbTM4U0ZuMkFiM2lRVTI3YmRuQUVPY0lOQzAzZTdvZHRHbDFoejhyRFRSaG1lREFoZDkxakkwenV5RUZMdWwxY25kVHcrMDRGa1M1dFZZamNpeEF0NkFwNExaalpFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "746c9057-4bc9-46d0-a5dd-635c924e16f7", "record_id": "flaws_cloudtrail:0000400:746c9057-4bc9-46d0-a5dd-635c924e16f7", "row_index": 400, "timestamp": "2019-06-13T21:13:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "746c9057-4bc9-46d0-a5dd-635c924e16f7", "eventTime": "2019-06-13T21:13:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXM0YvR3lFWkE2dHVHY2VHcEpwVU9LYnNVb0RHTCs1Uk9IVDVCdVRjdFFQYlVaaVJWeG94a0ExQmpnWFF1TE1lUWh5UlVDbGVXOTNnUnlTZEp1VmFsaVAyRnF6enhzbytXSlVTbm4rWFBLcGZUOG5aZzgyRHozZ2Q3eGJZalhTTWhtbTM4U0ZuMkFiM2lRVTI3YmRuQUVPY0lOQzAzZTdvZHRHbDFoejhyRFRSaG1lREFoZDkxakkwenV5RUZMdWwxY25kVHcrMDRGa1M1dFZZamNpeEF0NkFwNExaalpFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87b2c337-8a62-48de-ba21-0c442b1416fe", "record_id": "flaws_cloudtrail:0000401:87b2c337-8a62-48de-ba21-0c442b1416fe", "row_index": 401, "timestamp": "2019-06-13T21:13:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87b2c337-8a62-48de-ba21-0c442b1416fe", "eventTime": "2019-06-13T21:13:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87b2c337-8a62-48de-ba21-0c442b1416fe", "record_id": "flaws_cloudtrail:0000402:87b2c337-8a62-48de-ba21-0c442b1416fe", "row_index": 402, "timestamp": "2019-06-13T21:13:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87b2c337-8a62-48de-ba21-0c442b1416fe", "eventTime": "2019-06-13T21:13:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc16c3f-9895-4357-a2d8-0c8f90512d54", "record_id": "flaws_cloudtrail:0000403:ffc16c3f-9895-4357-a2d8-0c8f90512d54", "row_index": 403, "timestamp": "2019-06-13T21:15:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc16c3f-9895-4357-a2d8-0c8f90512d54", "eventTime": "2019-06-13T21:15:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc16c3f-9895-4357-a2d8-0c8f90512d54", "record_id": "flaws_cloudtrail:0000404:ffc16c3f-9895-4357-a2d8-0c8f90512d54", "row_index": 404, "timestamp": "2019-06-13T21:15:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc16c3f-9895-4357-a2d8-0c8f90512d54", "eventTime": "2019-06-13T21:15:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32c0eb8-1cec-446b-8838-6a2740b01df3", "record_id": "flaws_cloudtrail:0000405:a32c0eb8-1cec-446b-8838-6a2740b01df3", "row_index": 405, "timestamp": "2019-06-13T21:15:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32c0eb8-1cec-446b-8838-6a2740b01df3", "eventTime": "2019-06-13T21:15:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32c0eb8-1cec-446b-8838-6a2740b01df3", "record_id": "flaws_cloudtrail:0000406:a32c0eb8-1cec-446b-8838-6a2740b01df3", "row_index": 406, "timestamp": "2019-06-13T21:15:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32c0eb8-1cec-446b-8838-6a2740b01df3", "eventTime": "2019-06-13T21:15:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2c3724b-9348-45b4-afd9-35c4f755a726", "record_id": "flaws_cloudtrail:0000407:c2c3724b-9348-45b4-afd9-35c4f755a726", "row_index": 407, "timestamp": "2019-06-13T21:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2c3724b-9348-45b4-afd9-35c4f755a726", "eventTime": "2019-06-13T21:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB1MZHLVM86TR1TNK", "expiration": "Jun 14, 2019 3:50:57 AM", "sessionToken": "AgoJb3JpZ2luX2VjELb//////////wEaCXVzLXdlc3QtMiJGMEQCIGDtfp5shaGPJxX3Y90j6tYM9JZsGxtplCABuHkocykyAiBuGYGW7LZh4N95CJ7+6CXIc+pMmXMTUw34zNihx+AlZCrjAwjf//////////8BEAAaDDk3NTQyNjI2MjAyOSIM448UflJ8E/Pg0A/EKrcDv2PZq72Y53+KXr7UXt6ID5xS789EhedOBVUkTbnzolvVhP8FWZMuMBxZb1ebiLPPGvN0+YQe2WrUP8AmjcwW8RdVe0E1vb0/VesQQXXhN3NK3aRAKjLTEpN8Gq+kNe8lZ+ZWLcA4SG4bXexlhJVz8jCFqH4D/IVTBOAL7XI1vZI7ZOCcNJaPg9H0//e/auO/OZ4eB/papaHskoslwz68GvoXCW4QyC6edFBslCsPcHRNTkzE7PJ9LAq4hKTGe1ivkVF8HVLMOB7878fiunfc+IWzUNvZsji/iZcP+HEL08R1rcLJhQ2zaFmcxb9KjFVrlcv8m2CrpljMhx4+3xCeihI6vC0b2DPTzSiVOjEJJkIqpzBl6Kec/HzJ9bXFD8bVdZWX+EY9xX3WmPXGVfVI8G0FrKomVKqWaSRyQNHXwIr7uFXsK4Ul3m7INHX1IE6bGJG5o/Yq4wNk+RPaYQlbhBHDIS/Lh6Db4Zdx/SFWpiEDdij/Dl9KQDxmqZQ95HKf/YEc7GZfqvW3LWFzQQeqLezKlYF0MrHE29mWU97LnmNsSK0ByIstU2yM6ENA7KE+mGdlgbNHfzCU/4roBTq1AUgWPLg2EwhBKB7d8XwvLYX7EXHtpSlXMtYyM3rF5PAqu0hkP3RaH1JhEWd/i1hVhBIZ6xkaLausURMeVbZrikUp/7G9cQk8IBkzsngcLYNKwvsyxU7dRYz0nepYQ9mIN6Q+AcjXpvkBXVlnIpxHpcfTa9S/fsMW0TMkZ8QBIwlV/JEyZOr4UGHl6/zvcZ1o0TcTPmgeSBZFWoN0dzPMecu2378cwVYmdmwR9I6Zj3mxVWJhiE0="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2c3724b-9348-45b4-afd9-35c4f755a726", "record_id": "flaws_cloudtrail:0000408:c2c3724b-9348-45b4-afd9-35c4f755a726", "row_index": 408, "timestamp": "2019-06-13T21:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2c3724b-9348-45b4-afd9-35c4f755a726", "eventTime": "2019-06-13T21:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB1MZHLVM86TR1TNK", "expiration": "Jun 14, 2019 3:50:57 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae03fec-8b14-46cf-b07a-01856e855e3d", "record_id": "flaws_cloudtrail:0000409:2ae03fec-8b14-46cf-b07a-01856e855e3d", "row_index": 409, "timestamp": "2019-06-13T22:04:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae03fec-8b14-46cf-b07a-01856e855e3d", "eventTime": "2019-06-13T22:04:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae03fec-8b14-46cf-b07a-01856e855e3d", "record_id": "flaws_cloudtrail:0000410:2ae03fec-8b14-46cf-b07a-01856e855e3d", "row_index": 410, "timestamp": "2019-06-13T22:04:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae03fec-8b14-46cf-b07a-01856e855e3d", "eventTime": "2019-06-13T22:04:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0ce384a-d896-45cf-b7a5-513e178b022b", "record_id": "flaws_cloudtrail:0000411:a0ce384a-d896-45cf-b7a5-513e178b022b", "row_index": 411, "timestamp": "2019-06-13T22:19:33Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA4K58EEKY2TESF8CC", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "252.254.96.0", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0ce384a-d896-45cf-b7a5-513e178b022b", "eventTime": "2019-06-13T22:19:33Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.254.96.0", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4K58EEKY2TESF8CC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T20:44:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/13/[$LATEST]12b47ac84a1b47d0c8df16779444136b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a22ee6d6-d1d9-4afa-8fee-936e7c688c6d", "record_id": "flaws_cloudtrail:0000412:a22ee6d6-d1d9-4afa-8fee-936e7c688c6d", "row_index": 412, "timestamp": "2019-06-13T22:19:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a22ee6d6-d1d9-4afa-8fee-936e7c688c6d", "eventTime": "2019-06-13T22:19:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA02HQJPJZ02WANVGF", "expiration": "Jun 14, 2019 10:19:33 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0ce384a-d896-45cf-b7a5-513e178b022b", "record_id": "flaws_cloudtrail:0000413:a0ce384a-d896-45cf-b7a5-513e178b022b", "row_index": 413, "timestamp": "2019-06-13T22:19:33Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA4K58EEKY2TESF8CC", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "252.254.96.0", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0ce384a-d896-45cf-b7a5-513e178b022b", "eventTime": "2019-06-13T22:19:33Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.254.96.0", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4K58EEKY2TESF8CC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T20:44:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/13/[$LATEST]12b47ac84a1b47d0c8df16779444136b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a22ee6d6-d1d9-4afa-8fee-936e7c688c6d", "record_id": "flaws_cloudtrail:0000414:a22ee6d6-d1d9-4afa-8fee-936e7c688c6d", "row_index": 414, "timestamp": "2019-06-13T22:19:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a22ee6d6-d1d9-4afa-8fee-936e7c688c6d", "eventTime": "2019-06-13T22:19:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA02HQJPJZ02WANVGF", "expiration": "Jun 14, 2019 10:19:33 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5330acba-7e0b-402b-8a85-236f7c3dbee6", "record_id": "flaws_cloudtrail:0000415:5330acba-7e0b-402b-8a85-236f7c3dbee6", "row_index": 415, "timestamp": "2019-06-13T22:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5330acba-7e0b-402b-8a85-236f7c3dbee6", "eventTime": "2019-06-13T22:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACVPLOHYWJ5RD62Z8", "expiration": "Jun 14, 2019 4:53:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5330acba-7e0b-402b-8a85-236f7c3dbee6", "record_id": "flaws_cloudtrail:0000416:5330acba-7e0b-402b-8a85-236f7c3dbee6", "row_index": 416, "timestamp": "2019-06-13T22:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5330acba-7e0b-402b-8a85-236f7c3dbee6", "eventTime": "2019-06-13T22:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACVPLOHYWJ5RD62Z8", "expiration": "Jun 14, 2019 4:53:07 AM", "sessionToken": "AgoJb3JpZ2luX2VjELf//////////wEaCXVzLXdlc3QtMiJHMEUCIBWgWgKXHdDL2ZalHmxSVcC7DXlQQeVNjVKCkdbwvQkLAiEA30wzHpl76cr3nCA+1AU9rsP3RpwLK+pEBphQKQ/rq/Aq4wMI4P//////////ARAAGgw5NzU0MjYyNjIwMjkiDK9m9ax/O1RHqv/84Cq3A5TerFQZf1LN3ZKsvkRnHTuZbZDOOHwAJTaq/JhEX0/7gS7XFMfBrAtD4j3cOtFuFDZ3jhoF7lEQf40wXELbGPYEFFYh2aRsDE+C4lsXPeTUFA292godEWgChQHKX8a4emgDxNFPDGY0siZQD3MDmfbtHYVGX+2jJqFNVmlaG36+21fYc7XYV8SPVLW3/dRmUnAkleutwq8Snk8/41wLw26mIHVflYOxBwnTLKQ6fSkvFLU/ZimS6u2Y1E9boPM3gRSXnk0/gLqE3f/M6KnazLhZ+HSccWuueLBlykY0vlglJJtODh/pBKkf/wsgOlu4ZBXLnqLXI7HynV6HZdEdy6Q+KmCZIJLjrCDlub+IFCvVF50VY1Zhl8N4KLNwVIn6GHBpOezQ7TOwd888a6O/YJxav8unH9Yu5KhRQ8fHJNCMzdNjveFBGjQrIEOAdGpAf+J/HOuvz8JLk7oA93hwV0XOgL2CxeMNwua6LGFqKpEvjQMmb7IKGgGUEm14RBbTVGQZb23ah42+UiFzqy5w+D5R8FnnGaxxlxckrX36c8I7O3d4/SlEuhFRfBUBQFj6n9mlgdcPSxEwpJuL6AU6tAF/uhsIlBbJ5qqWC7CfdPcP+OXj5LHYQZTHicwOSfifLfbghbiBwYf8H79KxaOKEfvYsHcNyqXpdg00jRAu5VsYCX3cVkYMGTYE8P/4ZshfL/7hvooGrUTtHeGR6Std81eLMrMV68W4kBY9ZG/Qfs4SvKxExY57Zg6fTYIyZ1H8JL/ePDlJ856runKJD4E801842LznN+vb9QnSPK2Q6YhjJZ7kAdhk8pTDXhypchzemnUpLO40="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "588ffdc9-59e0-469a-bfa6-2862ed8e36de", "record_id": "flaws_cloudtrail:0000417:588ffdc9-59e0-469a-bfa6-2862ed8e36de", "row_index": 417, "timestamp": "2019-06-13T22:33:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "588ffdc9-59e0-469a-bfa6-2862ed8e36de", "eventTime": "2019-06-13T22:33:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "588ffdc9-59e0-469a-bfa6-2862ed8e36de", "record_id": "flaws_cloudtrail:0000418:588ffdc9-59e0-469a-bfa6-2862ed8e36de", "row_index": 418, "timestamp": "2019-06-13T22:33:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "588ffdc9-59e0-469a-bfa6-2862ed8e36de", "eventTime": "2019-06-13T22:33:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "224970-954b-4322-bcff-2b4a17fc6405", "record_id": "flaws_cloudtrail:0000419:224970-954b-4322-bcff-2b4a17fc6405", "row_index": 419, "timestamp": "2019-06-13T22:40:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "224970-954b-4322-bcff-2b4a17fc6405", "eventTime": "2019-06-13T22:40:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "224970-954b-4322-bcff-2b4a17fc6405", "record_id": "flaws_cloudtrail:0000420:224970-954b-4322-bcff-2b4a17fc6405", "row_index": 420, "timestamp": "2019-06-13T22:40:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "224970-954b-4322-bcff-2b4a17fc6405", "eventTime": "2019-06-13T22:40:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec77515f-3cf6-4025-a77f-50dfdc16fe21", "record_id": "flaws_cloudtrail:0000421:ec77515f-3cf6-4025-a77f-50dfdc16fe21", "row_index": 421, "timestamp": "2019-06-13T22:40:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec77515f-3cf6-4025-a77f-50dfdc16fe21", "eventTime": "2019-06-13T22:40:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNXd6dnNnVW1aV3hMUldoWkdPcTZhdUIwdjhVNkhzZ2hkR0NRd2lBRGZMQmZNUTM5OUdVTXloeFlhNGkwUHgvTmw0a0pVejJ1TEx2Vk1pVVlDWGdBeEVab2tUdTZoUWxVU3QrTmg5TVYwZkhmUmNhN3VXTkVObHZRamh3cDc4OHRKeERnM1lYV0RXSWt5TUpqalBUZXFXY2NPbVE2ZTZMVlN2SC83SzVWWXVqUlJiV21BTEMvNC9oZ3VqNWdNU2N2RThhb25nU1lJUXJNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec77515f-3cf6-4025-a77f-50dfdc16fe21", "record_id": "flaws_cloudtrail:0000422:ec77515f-3cf6-4025-a77f-50dfdc16fe21", "row_index": 422, "timestamp": "2019-06-13T22:40:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec77515f-3cf6-4025-a77f-50dfdc16fe21", "eventTime": "2019-06-13T22:40:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNXd6dnNnVW1aV3hMUldoWkdPcTZhdUIwdjhVNkhzZ2hkR0NRd2lBRGZMQmZNUTM5OUdVTXloeFlhNGkwUHgvTmw0a0pVejJ1TEx2Vk1pVVlDWGdBeEVab2tUdTZoUWxVU3QrTmg5TVYwZkhmUmNhN3VXTkVObHZRamh3cDc4OHRKeERnM1lYV0RXSWt5TUpqalBUZXFXY2NPbVE2ZTZMVlN2SC83SzVWWXVqUlJiV21BTEMvNC9oZ3VqNWdNU2N2RThhb25nU1lJUXJNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5a6859a-5f3d-4a6c-b1a9-2e64a6fed18c", "record_id": "flaws_cloudtrail:0000423:f5a6859a-5f3d-4a6c-b1a9-2e64a6fed18c", "row_index": 423, "timestamp": "2019-06-13T22:41:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5a6859a-5f3d-4a6c-b1a9-2e64a6fed18c", "eventTime": "2019-06-13T22:41:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhc2dSM3llM09mMS9zMkZEWGQ5Z0FkazlicjMwdnl5M1B0YkpvR25lUVIreDNEVkkzd0hkUXQ2TjhsZGVxZUlsNjJQcktOSk16dzVqZFowTUJsMGdYUlR0cytyMkZ5WFg0WmFYVlB5SHdoTFp2TTFBbEVMZ0JGVTdqTFRrTGhsK3RQOXgzR2d6SFNoMCs0dmV5SGFxWithRjBlS0pVeXlhK3JvbVltU01UVG1TdmY1a1hrVGxkdXJYUTgrREZjelZ2aU1BVXVFK1pZQTZ2dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5a6859a-5f3d-4a6c-b1a9-2e64a6fed18c", "record_id": "flaws_cloudtrail:0000424:f5a6859a-5f3d-4a6c-b1a9-2e64a6fed18c", "row_index": 424, "timestamp": "2019-06-13T22:41:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5a6859a-5f3d-4a6c-b1a9-2e64a6fed18c", "eventTime": "2019-06-13T22:41:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhc2dSM3llM09mMS9zMkZEWGQ5Z0FkazlicjMwdnl5M1B0YkpvR25lUVIreDNEVkkzd0hkUXQ2TjhsZGVxZUlsNjJQcktOSk16dzVqZFowTUJsMGdYUlR0cytyMkZ5WFg0WmFYVlB5SHdoTFp2TTFBbEVMZ0JGVTdqTFRrTGhsK3RQOXgzR2d6SFNoMCs0dmV5SGFxWithRjBlS0pVeXlhK3JvbVltU01UVG1TdmY1a1hrVGxkdXJYUTgrREZjelZ2aU1BVXVFK1pZQTZ2dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "721ba853-98b0-4931-bd93-46690b69ae4", "record_id": "flaws_cloudtrail:0000425:721ba853-98b0-4931-bd93-46690b69ae4", "row_index": 425, "timestamp": "2019-06-13T22:41:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "721ba853-98b0-4931-bd93-46690b69ae4", "eventTime": "2019-06-13T22:41:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXQjNpMjV0S3ZFaG9yNVQwRFlDUVdkdjVISVdZY0dnTWRXZzdXU2FNSFhTdVh4NGh3ZkEzUk1UV2VYZUFpWk4xTEVFMEtqaEtpNi9kaktxN2RwWnA4Slg4ZUt1TzBTc0FuMS9GMDFzOVBIRG9vak9KZ3doejlmT0YzZ05aLzlkd29UQlJ5c0J0ZVBOUlkzUU1kREVqOHZiZzRIRnh3aFR4QmlKSVh6Z2JuUGR2SXpCbDFRUTZxTlFMOW1Sb0h1Q2d1dXdxS3lWcUI4cVhadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "721ba853-98b0-4931-bd93-46690b69ae4", "record_id": "flaws_cloudtrail:0000426:721ba853-98b0-4931-bd93-46690b69ae4", "row_index": 426, "timestamp": "2019-06-13T22:41:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "721ba853-98b0-4931-bd93-46690b69ae4", "eventTime": "2019-06-13T22:41:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXQjNpMjV0S3ZFaG9yNVQwRFlDUVdkdjVISVdZY0dnTWRXZzdXU2FNSFhTdVh4NGh3ZkEzUk1UV2VYZUFpWk4xTEVFMEtqaEtpNi9kaktxN2RwWnA4Slg4ZUt1TzBTc0FuMS9GMDFzOVBIRG9vak9KZ3doejlmT0YzZ05aLzlkd29UQlJ5c0J0ZVBOUlkzUU1kREVqOHZiZzRIRnh3aFR4QmlKSVh6Z2JuUGR2SXpCbDFRUTZxTlFMOW1Sb0h1Q2d1dXdxS3lWcUI4cVhadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01835ea-268a-431f-856b-eabcf78bb05e", "record_id": "flaws_cloudtrail:0000427:01835ea-268a-431f-856b-eabcf78bb05e", "row_index": 427, "timestamp": "2019-06-13T22:41:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01835ea-268a-431f-856b-eabcf78bb05e", "eventTime": "2019-06-13T22:41:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtTm55dUlJMU1vYzhlUytncGw3SVpobjVBUTZ1Wm9sV2RCVzVOZXBuNFpNS2lQMmh2VG92ZVJ0bzdFK01aalRxWVdmTWVjRzkxTHFOLzdYRCtoMmVzQS9KZGpWcndjWmlxbDBvVVJFVGRkdDBKWUZLWTVvTjE0MzhVRVBiNmYwSHdFZGF0MjBIM0JQZVB1SVo0UGJBb3N1SlhsSzk1YXVqTGFjL2hpbzdtL3RrQjR0dXROZUNGdHRsMDRLM0N4SEtIQ0J4anRHciIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01835ea-268a-431f-856b-eabcf78bb05e", "record_id": "flaws_cloudtrail:0000428:01835ea-268a-431f-856b-eabcf78bb05e", "row_index": 428, "timestamp": "2019-06-13T22:41:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01835ea-268a-431f-856b-eabcf78bb05e", "eventTime": "2019-06-13T22:41:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtTm55dUlJMU1vYzhlUytncGw3SVpobjVBUTZ1Wm9sV2RCVzVOZXBuNFpNS2lQMmh2VG92ZVJ0bzdFK01aalRxWVdmTWVjRzkxTHFOLzdYRCtoMmVzQS9KZGpWcndjWmlxbDBvVVJFVGRkdDBKWUZLWTVvTjE0MzhVRVBiNmYwSHdFZGF0MjBIM0JQZVB1SVo0UGJBb3N1SlhsSzk1YXVqTGFjL2hpbzdtL3RrQjR0dXROZUNGdHRsMDRLM0N4SEtIQ0J4anRHciIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b014a9a-ef37-44f2-939d-f3ca2950ff99", "record_id": "flaws_cloudtrail:0000429:1b014a9a-ef37-44f2-939d-f3ca2950ff99", "row_index": 429, "timestamp": "2019-06-13T22:41:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b014a9a-ef37-44f2-939d-f3ca2950ff99", "eventTime": "2019-06-13T22:41:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkL1pCZThQck9JeFhOYkxRSDRlWXIzNlRTd3AyQ0hIYUpLT0JDTEJSWlM0YTQ3UFR0Z3J1TWdoNmJtRjV5QnpTNTEzY1lNRy9mb1FMRlVmR3VxUkNKZGNLWDJKblByMU1tWlJoQWJzWWxyWXIwSWJSbWVhdWpOU3BYNzdTVi9XYlpYdVBUME1LUldQa01QemRLRFNzcG9IenptSmtiVUJEOW40L2lvYTEzeVhHNm5vdEZLUjFOMzZNWU9NL0JZWDkycEdsNTFqY2FRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b014a9a-ef37-44f2-939d-f3ca2950ff99", "record_id": "flaws_cloudtrail:0000430:1b014a9a-ef37-44f2-939d-f3ca2950ff99", "row_index": 430, "timestamp": "2019-06-13T22:41:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b014a9a-ef37-44f2-939d-f3ca2950ff99", "eventTime": "2019-06-13T22:41:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkL1pCZThQck9JeFhOYkxRSDRlWXIzNlRTd3AyQ0hIYUpLT0JDTEJSWlM0YTQ3UFR0Z3J1TWdoNmJtRjV5QnpTNTEzY1lNRy9mb1FMRlVmR3VxUkNKZGNLWDJKblByMU1tWlJoQWJzWWxyWXIwSWJSbWVhdWpOU3BYNzdTVi9XYlpYdVBUME1LUldQa01QemRLRFNzcG9IenptSmtiVUJEOW40L2lvYTEzeVhHNm5vdEZLUjFOMzZNWU9NL0JZWDkycEdsNTFqY2FRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c8a1a9-f38d-4e4e-8add-bbfeee7d6387", "record_id": "flaws_cloudtrail:0000431:b1c8a1a9-f38d-4e4e-8add-bbfeee7d6387", "row_index": 431, "timestamp": "2019-06-13T22:41:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c8a1a9-f38d-4e4e-8add-bbfeee7d6387", "eventTime": "2019-06-13T22:41:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0aWdBdFpVVXF0NWJkaVBCQ2l6a2pWb1d4SUR5eHNKeVZoQkFPSnd2Mlo4aUNJTVIwQTZOT1VleEs4VmtJZDNRM3kwNFJ2N0I2U2wwOXEwaHZ2eitNdDk3YUcvMC9yVzZBMTBDeWYxckZYaGtSUGwySkxyNUcyMGc2U25rYVNUaG9SQUNnYjJGQkU2RmFBSjBKMFVaSEF5L3FuU1dEaHIvOFdTTW1XSTlpbTZsOXE3bzQyS1crZ1BLR2Z3NW9FdFRXeGZmUjBnMFF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c8a1a9-f38d-4e4e-8add-bbfeee7d6387", "record_id": "flaws_cloudtrail:0000432:b1c8a1a9-f38d-4e4e-8add-bbfeee7d6387", "row_index": 432, "timestamp": "2019-06-13T22:41:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c8a1a9-f38d-4e4e-8add-bbfeee7d6387", "eventTime": "2019-06-13T22:41:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0aWdBdFpVVXF0NWJkaVBCQ2l6a2pWb1d4SUR5eHNKeVZoQkFPSnd2Mlo4aUNJTVIwQTZOT1VleEs4VmtJZDNRM3kwNFJ2N0I2U2wwOXEwaHZ2eitNdDk3YUcvMC9yVzZBMTBDeWYxckZYaGtSUGwySkxyNUcyMGc2U25rYVNUaG9SQUNnYjJGQkU2RmFBSjBKMFVaSEF5L3FuU1dEaHIvOFdTTW1XSTlpbTZsOXE3bzQyS1crZ1BLR2Z3NW9FdFRXeGZmUjBnMFF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f17d25-3f15-4842-ba71-bb78ac054a4e", "record_id": "flaws_cloudtrail:0000433:39f17d25-3f15-4842-ba71-bb78ac054a4e", "row_index": 433, "timestamp": "2019-06-13T22:41:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f17d25-3f15-4842-ba71-bb78ac054a4e", "eventTime": "2019-06-13T22:41:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXS2dHQ0paaG4rVmRBZmVpTzgrZzdVeW9PWGU5alU2RmdwYjZBMkg2bHFBRFhFWmE2MUl3c2xRNHYyLzVndkNYOUdFL1F2WEEwZ1VWRzVqcVRZd21ibkc3enZEQmFEbXJZK0lyNjhYUG9rS1RuM3R6S1piOHBLT1pLajcyMlVXVHBlTTJIN01MQSs3OHVWcHNYRW56MWRocWlJc1FMeFpGU1RmOXZTd0Y1c3BjQjdqeXA1TDBxd000TlltVG5acFgzT3JwdjdmckJJSEJRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f17d25-3f15-4842-ba71-bb78ac054a4e", "record_id": "flaws_cloudtrail:0000434:39f17d25-3f15-4842-ba71-bb78ac054a4e", "row_index": 434, "timestamp": "2019-06-13T22:41:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f17d25-3f15-4842-ba71-bb78ac054a4e", "eventTime": "2019-06-13T22:41:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXS2dHQ0paaG4rVmRBZmVpTzgrZzdVeW9PWGU5alU2RmdwYjZBMkg2bHFBRFhFWmE2MUl3c2xRNHYyLzVndkNYOUdFL1F2WEEwZ1VWRzVqcVRZd21ibkc3enZEQmFEbXJZK0lyNjhYUG9rS1RuM3R6S1piOHBLT1pLajcyMlVXVHBlTTJIN01MQSs3OHVWcHNYRW56MWRocWlJc1FMeFpGU1RmOXZTd0Y1c3BjQjdqeXA1TDBxd000TlltVG5acFgzT3JwdjdmckJJSEJRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2c7b1d-69cb-44fe-abda-b83733338949", "record_id": "flaws_cloudtrail:0000435:5d2c7b1d-69cb-44fe-abda-b83733338949", "row_index": 435, "timestamp": "2019-06-13T22:41:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2c7b1d-69cb-44fe-abda-b83733338949", "eventTime": "2019-06-13T22:41:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzd3llQTIrczRuN004Mjh4YllzdFZaRXZVY1FoWVpYUFBlUTJBNld6ZTNZem5hV1YzNkJ1ZlhVZkp4cU5LQlErVnlvVGFCc0k0cGd6bUtFYzJVQUlkSUZWVFlucHFHamJBUis3VTRrd2JmSi90NGJFY2FBVHNUb0VkamYxVWJldjBrT2FrWUpXRDZRRWc3bTVwWEs1dXVnQ1ovK1ljV2Zmc0xEK2dKK2h0TGpFU1V4TU9tQXhheC9YTXFCdWNjMjRTU213eGtZRmFnND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2c7b1d-69cb-44fe-abda-b83733338949", "record_id": "flaws_cloudtrail:0000436:5d2c7b1d-69cb-44fe-abda-b83733338949", "row_index": 436, "timestamp": "2019-06-13T22:41:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2c7b1d-69cb-44fe-abda-b83733338949", "eventTime": "2019-06-13T22:41:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzd3llQTIrczRuN004Mjh4YllzdFZaRXZVY1FoWVpYUFBlUTJBNld6ZTNZem5hV1YzNkJ1ZlhVZkp4cU5LQlErVnlvVGFCc0k0cGd6bUtFYzJVQUlkSUZWVFlucHFHamJBUis3VTRrd2JmSi90NGJFY2FBVHNUb0VkamYxVWJldjBrT2FrWUpXRDZRRWc3bTVwWEs1dXVnQ1ovK1ljV2Zmc0xEK2dKK2h0TGpFU1V4TU9tQXhheC9YTXFCdWNjMjRTU213eGtZRmFnND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7004fd9d-7abd-412e-8881-97cfbab5cb17", "record_id": "flaws_cloudtrail:0000437:7004fd9d-7abd-412e-8881-97cfbab5cb17", "row_index": 437, "timestamp": "2019-06-13T22:41:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7004fd9d-7abd-412e-8881-97cfbab5cb17", "eventTime": "2019-06-13T22:41:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6OUd5RGNtelVQc0xodjRFSUpwck8wbWpGR3U5NEpad2NmRExMY3pGUktLakpiQmRrQitXeDdFNzAweVo3UmdFcXBhd2tGbHlCdVZITktQL1VLSXQxejJ2UEl6YVVPenNuc0I4cHpWdnhocnJ3ckFsTC8vc2E3NXc4ZnU4bXBObEZRRjdTalUreUJWWXdIZGxzTzAzTGJyWVQ4WXNYdEtTTnZaWFk4Z1pmSXRHSW8va1RvOEtxa205dCt5cCs0a1hVSStDMkNXc1h3NHp1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7004fd9d-7abd-412e-8881-97cfbab5cb17", "record_id": "flaws_cloudtrail:0000438:7004fd9d-7abd-412e-8881-97cfbab5cb17", "row_index": 438, "timestamp": "2019-06-13T22:41:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7004fd9d-7abd-412e-8881-97cfbab5cb17", "eventTime": "2019-06-13T22:41:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6OUd5RGNtelVQc0xodjRFSUpwck8wbWpGR3U5NEpad2NmRExMY3pGUktLakpiQmRrQitXeDdFNzAweVo3UmdFcXBhd2tGbHlCdVZITktQL1VLSXQxejJ2UEl6YVVPenNuc0I4cHpWdnhocnJ3ckFsTC8vc2E3NXc4ZnU4bXBObEZRRjdTalUreUJWWXdIZGxzTzAzTGJyWVQ4WXNYdEtTTnZaWFk4Z1pmSXRHSW8va1RvOEtxa205dCt5cCs0a1hVSStDMkNXc1h3NHp1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d570a30d-89f0-47fe-8b00-15f641869", "record_id": "flaws_cloudtrail:0000439:d570a30d-89f0-47fe-8b00-15f641869", "row_index": 439, "timestamp": "2019-06-13T22:41:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d570a30d-89f0-47fe-8b00-15f641869", "eventTime": "2019-06-13T22:41:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFTkRtM2VhSmc5eFVWTXJkZVl6SlRJelc2bWNEN2o1MnlYelQrUTNFRXJtRW5LV3laNDZlclNadVRlcXVJakgvbzdTWk5CbC9PWC9oTVJ3V0FKM05pN0xyUjJGWFp1dG5sL1BPaXpybHVJekN1VFlCWWZsakJXM0YwSlVvbnVaTzgxemVkODFHMERmeWNTTklJTGlrL21vQnQ3YkN1TjVERVRsd0V1VEc2Zjg1eG83cDBwbzBLYnZYUGlTMktaUHlsMWk5NGxtM0o1VlBYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d570a30d-89f0-47fe-8b00-15f641869", "record_id": "flaws_cloudtrail:0000440:d570a30d-89f0-47fe-8b00-15f641869", "row_index": 440, "timestamp": "2019-06-13T22:41:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d570a30d-89f0-47fe-8b00-15f641869", "eventTime": "2019-06-13T22:41:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFTkRtM2VhSmc5eFVWTXJkZVl6SlRJelc2bWNEN2o1MnlYelQrUTNFRXJtRW5LV3laNDZlclNadVRlcXVJakgvbzdTWk5CbC9PWC9oTVJ3V0FKM05pN0xyUjJGWFp1dG5sL1BPaXpybHVJekN1VFlCWWZsakJXM0YwSlVvbnVaTzgxemVkODFHMERmeWNTTklJTGlrL21vQnQ3YkN1TjVERVRsd0V1VEc2Zjg1eG83cDBwbzBLYnZYUGlTMktaUHlsMWk5NGxtM0o1VlBYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9256e85-0a3b-4148-801a-4a9e93abe9f9", "record_id": "flaws_cloudtrail:0000441:a9256e85-0a3b-4148-801a-4a9e93abe9f9", "row_index": 441, "timestamp": "2019-06-13T22:41:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9256e85-0a3b-4148-801a-4a9e93abe9f9", "eventTime": "2019-06-13T22:41:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqRHlyZUM3TG9tVnltS1FiOW0zR0x4Q045Q2l2Nm5JOWc5QyszZHYraElwR0QxS1dJaTFHMExRYmgydFFXNFJTcGR4QlB0ODI3QUxGckd2Q0RBT2U1VlhRdDJ2Q3VOYXRmbGlTN1M4TEJPelEwK0VYUHRhWnY4N2ZVZGYyN3JTZTdEU0pPQ2xEcDZ5cm1wQVRsbUNGeVk5Yk5SejZ1WWt3YWR5ZUVTOEJnL2NtcHVoVlR3aFhyKzNYOER1akNUUUdmUmVWdG1aK0tDcCtaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9256e85-0a3b-4148-801a-4a9e93abe9f9", "record_id": "flaws_cloudtrail:0000442:a9256e85-0a3b-4148-801a-4a9e93abe9f9", "row_index": 442, "timestamp": "2019-06-13T22:41:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9256e85-0a3b-4148-801a-4a9e93abe9f9", "eventTime": "2019-06-13T22:41:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqRHlyZUM3TG9tVnltS1FiOW0zR0x4Q045Q2l2Nm5JOWc5QyszZHYraElwR0QxS1dJaTFHMExRYmgydFFXNFJTcGR4QlB0ODI3QUxGckd2Q0RBT2U1VlhRdDJ2Q3VOYXRmbGlTN1M4TEJPelEwK0VYUHRhWnY4N2ZVZGYyN3JTZTdEU0pPQ2xEcDZ5cm1wQVRsbUNGeVk5Yk5SejZ1WWt3YWR5ZUVTOEJnL2NtcHVoVlR3aFhyKzNYOER1akNUUUdmUmVWdG1aK0tDcCtaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c71870eb-00d3-4bde-89d8-d3b4e5fd63d5", "record_id": "flaws_cloudtrail:0000443:c71870eb-00d3-4bde-89d8-d3b4e5fd63d5", "row_index": 443, "timestamp": "2019-06-13T22:41:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c71870eb-00d3-4bde-89d8-d3b4e5fd63d5", "eventTime": "2019-06-13T22:41:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoZEhZQ2dvZ015TTllMkxXS3B3cEFIYS9jNzJEYlY3Qi9Ca0hySGMzd0FYLzZRZ1BvVkxZdUl6M3NJZFB4dEd2QzhlUG9xbnBwQnQybDVSRDhuZVA4Qi9EelhKMjQxdW52QlBHWGIzdG5xb0RFK3RqbTVidXVXdTJjbzN1WU5SUWtxcWRldkRUc0s4Z012bWxUSXN6UGl0WThlWmdOOXBPSnFnWEU2ZkZlK2RvK2pFTU5OaTE3QXJBVGJzWXNOS1U3enJhN3BubTdNUEhGZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c71870eb-00d3-4bde-89d8-d3b4e5fd63d5", "record_id": "flaws_cloudtrail:0000444:c71870eb-00d3-4bde-89d8-d3b4e5fd63d5", "row_index": 444, "timestamp": "2019-06-13T22:41:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c71870eb-00d3-4bde-89d8-d3b4e5fd63d5", "eventTime": "2019-06-13T22:41:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoZEhZQ2dvZ015TTllMkxXS3B3cEFIYS9jNzJEYlY3Qi9Ca0hySGMzd0FYLzZRZ1BvVkxZdUl6M3NJZFB4dEd2QzhlUG9xbnBwQnQybDVSRDhuZVA4Qi9EelhKMjQxdW52QlBHWGIzdG5xb0RFK3RqbTVidXVXdTJjbzN1WU5SUWtxcWRldkRUc0s4Z012bWxUSXN6UGl0WThlWmdOOXBPSnFnWEU2ZkZlK2RvK2pFTU5OaTE3QXJBVGJzWXNOS1U3enJhN3BubTdNUEhGZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "081e5cbe-ecc3-4730-ad64-a486df2b4134", "record_id": "flaws_cloudtrail:0000445:081e5cbe-ecc3-4730-ad64-a486df2b4134", "row_index": 445, "timestamp": "2019-06-13T22:41:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "081e5cbe-ecc3-4730-ad64-a486df2b4134", "eventTime": "2019-06-13T22:41:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2U1RTNHdNcnlVVmNObTAvWG5jZVo3amJXaHJDdldMeDFzbUw0QWxoV1BnV2dzUXRmcGpxY2VySFNreU44b0FnMU9kTXB0a2dwYzNZNWIrcHNUNHQrRDIxeW5XOVlJV2RmcVV0V09vR0pQS1NEMTRtaWg2V2ZQQ21SNDRWSXVoZHVud0h1Tk1vMFFvWlJGeS9CS1VjcW5pVE1ncTQrMXUzZGRXWElySDJCVXpDZ21HdGZ1T1ovUzNQOFMyOVNmOFpSRVFPaEppOCtIST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "081e5cbe-ecc3-4730-ad64-a486df2b4134", "record_id": "flaws_cloudtrail:0000446:081e5cbe-ecc3-4730-ad64-a486df2b4134", "row_index": 446, "timestamp": "2019-06-13T22:41:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "081e5cbe-ecc3-4730-ad64-a486df2b4134", "eventTime": "2019-06-13T22:41:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2U1RTNHdNcnlVVmNObTAvWG5jZVo3amJXaHJDdldMeDFzbUw0QWxoV1BnV2dzUXRmcGpxY2VySFNreU44b0FnMU9kTXB0a2dwYzNZNWIrcHNUNHQrRDIxeW5XOVlJV2RmcVV0V09vR0pQS1NEMTRtaWg2V2ZQQ21SNDRWSXVoZHVud0h1Tk1vMFFvWlJGeS9CS1VjcW5pVE1ncTQrMXUzZGRXWElySDJCVXpDZ21HdGZ1T1ovUzNQOFMyOVNmOFpSRVFPaEppOCtIST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ddd8d6e-5a93-460c-a021-5b885d8b1339", "record_id": "flaws_cloudtrail:0000447:1ddd8d6e-5a93-460c-a021-5b885d8b1339", "row_index": 447, "timestamp": "2019-06-13T22:41:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ddd8d6e-5a93-460c-a021-5b885d8b1339", "eventTime": "2019-06-13T22:41:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQnVGSWtGOXV6UXNGOGVRakdWbFJtOERabjhyS2Fkbm5zVm5pcG1xR2pqWmpQRk1PeU95N01mOUpkU2ttaUZpMy93OE1BcjB3emx6cnI3eDZ1N0ErQUhBaHhnTTJ3WkpkeGZpLytQRnNNWE5kSWhTOHhVandwOFdkMDdEb0NGQ3dpblFyMDkxSnZTYXFSVkF2M05yZ3QrS3hya01BallSNUJZclg0cEdRRnE1QWVTb3JwRzQyaldaQ3dTUHZyblJueXFIS21KTUFSVkVQcWkzdTRFbHpZVVMwcUIveU4wPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db0ad20-6793-47bd-93ce-f21655162a76", "record_id": "flaws_cloudtrail:0000448:3db0ad20-6793-47bd-93ce-f21655162a76", "row_index": 448, "timestamp": "2019-06-13T22:41:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db0ad20-6793-47bd-93ce-f21655162a76", "eventTime": "2019-06-13T22:41:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKSkpZdWpVVXhPaE1MWFdkU0l0UlcxK2JDZTVmbXd0MlpWZ2p2c2FRcTZHcUhXMVh0YVRMUHl1U3paNVpVMkxFOENxUHY1c2pXUWZXYnRaaXFVbTY0NHR2bHg1THE0NnZjcXhGMkZEMWp1TklHcUkrM3diVEhwYjRqdk8rYzZnaTdjUjJKMkVMTU1LTUdsVHJ1dFZ4L2RyckozbUhPNEVMSDJPTXdnV0prQjRkazROS25xYVVDL1I1UTRobmlRUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ddd8d6e-5a93-460c-a021-5b885d8b1339", "record_id": "flaws_cloudtrail:0000449:1ddd8d6e-5a93-460c-a021-5b885d8b1339", "row_index": 449, "timestamp": "2019-06-13T22:41:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ddd8d6e-5a93-460c-a021-5b885d8b1339", "eventTime": "2019-06-13T22:41:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQnVGSWtGOXV6UXNGOGVRakdWbFJtOERabjhyS2Fkbm5zVm5pcG1xR2pqWmpQRk1PeU95N01mOUpkU2ttaUZpMy93OE1BcjB3emx6cnI3eDZ1N0ErQUhBaHhnTTJ3WkpkeGZpLytQRnNNWE5kSWhTOHhVandwOFdkMDdEb0NGQ3dpblFyMDkxSnZTYXFSVkF2M05yZ3QrS3hya01BallSNUJZclg0cEdRRnE1QWVTb3JwRzQyaldaQ3dTUHZyblJueXFIS21KTUFSVkVQcWkzdTRFbHpZVVMwcUIveU4wPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db0ad20-6793-47bd-93ce-f21655162a76", "record_id": "flaws_cloudtrail:0000450:3db0ad20-6793-47bd-93ce-f21655162a76", "row_index": 450, "timestamp": "2019-06-13T22:41:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db0ad20-6793-47bd-93ce-f21655162a76", "eventTime": "2019-06-13T22:41:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKSkpZdWpVVXhPaE1MWFdkU0l0UlcxK2JDZTVmbXd0MlpWZ2p2c2FRcTZHcUhXMVh0YVRMUHl1U3paNVpVMkxFOENxUHY1c2pXUWZXYnRaaXFVbTY0NHR2bHg1THE0NnZjcXhGMkZEMWp1TklHcUkrM3diVEhwYjRqdk8rYzZnaTdjUjJKMkVMTU1LTUdsVHJ1dFZ4L2RyckozbUhPNEVMSDJPTXdnV0prQjRkazROS25xYVVDL1I1UTRobmlRUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8ccfb4c-c4ad-4a8a-88a6-c68e99572", "record_id": "flaws_cloudtrail:0000451:a8ccfb4c-c4ad-4a8a-88a6-c68e99572", "row_index": 451, "timestamp": "2019-06-13T22:41:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8ccfb4c-c4ad-4a8a-88a6-c68e99572", "eventTime": "2019-06-13T22:41:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqKzRNT1pJbkl6NEF3QUk0L3l5RGtaOWx0YjFWOG9HY2FjYUUwZnB1TDl3ZktBclA1dVdFTWVyZzc5czRqZzhwSGJBVVJVVFJZV0FoNml4NEsxWTNLaXRoQlhUSjdaNVkyaGg4Mmt5VWhlSHo0aXNKYVEyYkthb0l5MHFTSzl2aVQ1Qy9lN3AyRXdaemhCZXRNbWtLaVJZVWRYYVlXRW5uSVZPTy93ZWFHSnhNVWtYSjU1MlBnYzdWcXY0R29GSlJWK09ncjM3MDUzZ0w0ZXNwTkJrRHFRRHhvK2lheU1nPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "541bc0ea-b7db-4d96-af1e-b59d47ac8136", "record_id": "flaws_cloudtrail:0000452:541bc0ea-b7db-4d96-af1e-b59d47ac8136", "row_index": 452, "timestamp": "2019-06-13T22:41:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "541bc0ea-b7db-4d96-af1e-b59d47ac8136", "eventTime": "2019-06-13T22:41:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUUQvTzBFaTJsNVlKdHBGRllCQ2dzR2lqYzNOem1NbVpBNE1YS0NDY08yWExjbFNJdXNiWkh4cjFiT2cxeGFkQnFrbFUwTlMvT2ZtUThSTklVMkhTWXdCRlNyaDN6eTB4Vm1URWt1N24wVEl3aVF2Q2lWanlmeGE1NzlCeWl2VmdIZWMyNHBSTVBmdXk3UGR3TE42SDJwdkJ5STk5OGtBcnk5SUF1SzFySzZ2VnRHU1gySnhkYWhkcHhvd3J3UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8ccfb4c-c4ad-4a8a-88a6-c68e99572", "record_id": "flaws_cloudtrail:0000453:a8ccfb4c-c4ad-4a8a-88a6-c68e99572", "row_index": 453, "timestamp": "2019-06-13T22:41:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8ccfb4c-c4ad-4a8a-88a6-c68e99572", "eventTime": "2019-06-13T22:41:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqKzRNT1pJbkl6NEF3QUk0L3l5RGtaOWx0YjFWOG9HY2FjYUUwZnB1TDl3ZktBclA1dVdFTWVyZzc5czRqZzhwSGJBVVJVVFJZV0FoNml4NEsxWTNLaXRoQlhUSjdaNVkyaGg4Mmt5VWhlSHo0aXNKYVEyYkthb0l5MHFTSzl2aVQ1Qy9lN3AyRXdaemhCZXRNbWtLaVJZVWRYYVlXRW5uSVZPTy93ZWFHSnhNVWtYSjU1MlBnYzdWcXY0R29GSlJWK09ncjM3MDUzZ0w0ZXNwTkJrRHFRRHhvK2lheU1nPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "541bc0ea-b7db-4d96-af1e-b59d47ac8136", "record_id": "flaws_cloudtrail:0000454:541bc0ea-b7db-4d96-af1e-b59d47ac8136", "row_index": 454, "timestamp": "2019-06-13T22:41:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "541bc0ea-b7db-4d96-af1e-b59d47ac8136", "eventTime": "2019-06-13T22:41:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyUUQvTzBFaTJsNVlKdHBGRllCQ2dzR2lqYzNOem1NbVpBNE1YS0NDY08yWExjbFNJdXNiWkh4cjFiT2cxeGFkQnFrbFUwTlMvT2ZtUThSTklVMkhTWXdCRlNyaDN6eTB4Vm1URWt1N24wVEl3aVF2Q2lWanlmeGE1NzlCeWl2VmdIZWMyNHBSTVBmdXk3UGR3TE42SDJwdkJ5STk5OGtBcnk5SUF1SzFySzZ2VnRHU1gySnhkYWhkcHhvd3J3UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "749a2389-70c6-4496-991b-72ca5bdc777c", "record_id": "flaws_cloudtrail:0000455:749a2389-70c6-4496-991b-72ca5bdc777c", "row_index": 455, "timestamp": "2019-06-13T22:41:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "749a2389-70c6-4496-991b-72ca5bdc777c", "eventTime": "2019-06-13T22:41:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJldVpCdGZONnljSnZCUDhBenNRcTNCZzVVTnlzdzRKdHo0bEJPZ01QVU9pSll3a2VWK0hQbEgvYjgwTkszdFppTEpjL1c2cE8vSHFUMzIzR2FrR1daR0V2RXNXeU81NVplMnZCMWpqZXZTNTlJSTJuYVJ1SG5TdE9aUGhJTWN0RTV3Z2VSRTl1bTJMUFl5MnB1SmQvUkFXOUVQeXBaQ0ZqSTVhOGdlcDZKeklHNkZKUlZDRk1LKzNCNnEySWxwMGVuWFR5Zlozd253Mlc1VVdqMkZ0aGcyUjdiZTAxc1E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98d8b910-2658-46a1-a255-5a3cf69c35ee", "record_id": "flaws_cloudtrail:0000456:98d8b910-2658-46a1-a255-5a3cf69c35ee", "row_index": 456, "timestamp": "2019-06-13T22:41:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98d8b910-2658-46a1-a255-5a3cf69c35ee", "eventTime": "2019-06-13T22:41:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxUWxPV2xZaGFKTnVPZklUZGh5UmJvSEVNSS9ROU9DeGp1Uzg3Sld2ZjVMM0tjLzVmS1lSOE9kdU9aSWRSeCtid21Ebnh1Y0pycU9nWnhPZDJJcWFuQjd2UkxSb0IrWTFOcVVTSTc2aldGMVhVVGNNU3BRQWkzdkUwc0I4UWhZYWZndFo0V3gvd2RFQ3FweTlEeU85Q2x1QzJETGFQd3h4V3FwTFlrMzU4N1Q5NFFHeDl0MTVDSmNFeVdORVpmQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "749a2389-70c6-4496-991b-72ca5bdc777c", "record_id": "flaws_cloudtrail:0000457:749a2389-70c6-4496-991b-72ca5bdc777c", "row_index": 457, "timestamp": "2019-06-13T22:41:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "749a2389-70c6-4496-991b-72ca5bdc777c", "eventTime": "2019-06-13T22:41:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJldVpCdGZONnljSnZCUDhBenNRcTNCZzVVTnlzdzRKdHo0bEJPZ01QVU9pSll3a2VWK0hQbEgvYjgwTkszdFppTEpjL1c2cE8vSHFUMzIzR2FrR1daR0V2RXNXeU81NVplMnZCMWpqZXZTNTlJSTJuYVJ1SG5TdE9aUGhJTWN0RTV3Z2VSRTl1bTJMUFl5MnB1SmQvUkFXOUVQeXBaQ0ZqSTVhOGdlcDZKeklHNkZKUlZDRk1LKzNCNnEySWxwMGVuWFR5Zlozd253Mlc1VVdqMkZ0aGcyUjdiZTAxc1E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98d8b910-2658-46a1-a255-5a3cf69c35ee", "record_id": "flaws_cloudtrail:0000458:98d8b910-2658-46a1-a255-5a3cf69c35ee", "row_index": 458, "timestamp": "2019-06-13T22:41:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98d8b910-2658-46a1-a255-5a3cf69c35ee", "eventTime": "2019-06-13T22:41:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxUWxPV2xZaGFKTnVPZklUZGh5UmJvSEVNSS9ROU9DeGp1Uzg3Sld2ZjVMM0tjLzVmS1lSOE9kdU9aSWRSeCtid21Ebnh1Y0pycU9nWnhPZDJJcWFuQjd2UkxSb0IrWTFOcVVTSTc2aldGMVhVVGNNU3BRQWkzdkUwc0I4UWhZYWZndFo0V3gvd2RFQ3FweTlEeU85Q2x1QzJETGFQd3h4V3FwTFlrMzU4N1Q5NFFHeDl0MTVDSmNFeVdORVpmQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7abda9b8-1d4e-4bb8-a747-870896f8de929", "record_id": "flaws_cloudtrail:0000459:7abda9b8-1d4e-4bb8-a747-870896f8de929", "row_index": 459, "timestamp": "2019-06-13T22:41:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7abda9b8-1d4e-4bb8-a747-870896f8de929", "eventTime": "2019-06-13T22:41:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTEE5NlBaSFVrYzdCUS9JV0lTaC83WmVLOWhSQnZncVpiRDRDK2QzcytxQ2xIVmtPQWFqZHZpd0dvcXU0dXRkUU9tUWdTVE15SEdHRlNmQWdmQ2ZsU3VPcDVVQWRMNFdkZFpMQXdrVWF2eHppVjBzclBqdWpyd081YlNXTVc2OWl3Rkt6NTZyZE42R1VVb2ZGblNTanUrSmZCakhtTUVOeWw4SUVpdEFBanZ3RnY4M1BCRE5LaERwZUgyV2I5MFF6NitKb3VxVjhCbWkwUnRTVnZWU2NwZWJWQmZiWEM0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7abda9b8-1d4e-4bb8-a747-870896f8de929", "record_id": "flaws_cloudtrail:0000460:7abda9b8-1d4e-4bb8-a747-870896f8de929", "row_index": 460, "timestamp": "2019-06-13T22:41:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7abda9b8-1d4e-4bb8-a747-870896f8de929", "eventTime": "2019-06-13T22:41:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTEE5NlBaSFVrYzdCUS9JV0lTaC83WmVLOWhSQnZncVpiRDRDK2QzcytxQ2xIVmtPQWFqZHZpd0dvcXU0dXRkUU9tUWdTVE15SEdHRlNmQWdmQ2ZsU3VPcDVVQWRMNFdkZFpMQXdrVWF2eHppVjBzclBqdWpyd081YlNXTVc2OWl3Rkt6NTZyZE42R1VVb2ZGblNTanUrSmZCakhtTUVOeWw4SUVpdEFBanZ3RnY4M1BCRE5LaERwZUgyV2I5MFF6NitKb3VxVjhCbWkwUnRTVnZWU2NwZWJWQmZiWEM0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49954-41b6-4f20-b8c1-2123e559532d2", "record_id": "flaws_cloudtrail:0000461:49954-41b6-4f20-b8c1-2123e559532d2", "row_index": 461, "timestamp": "2019-06-13T22:41:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49954-41b6-4f20-b8c1-2123e559532d2", "eventTime": "2019-06-13T22:41:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWWF5b0dGSGQrcG5NS1BKd0lQNnNvR290SmN2WmtpTEQ0SFoyUmFKQjBaZTJhaHNSZTZUWmMrTG1LaytDd3lodE02RVhuN29TbGIxUGdKNzhVanFBUW9UYllta01QQVJUdG9CaUQxU1NiTGUxOXplcGdtRE9ZVkROYU42UnZlSHkxeE5YM0s4Z0xjTE1QeFRtQnNQSm1EeDVCVGlZNUpmTTRDOEo1dnhNR0F5SC9UK2VKZG93VUhHenpzazY5dUl2WUZ3SWFqMWtGZ21DL1BVcFpBZzlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "195abb13-a062-491f-93f8-ac40fbe13160", "record_id": "flaws_cloudtrail:0000462:195abb13-a062-491f-93f8-ac40fbe13160", "row_index": 462, "timestamp": "2019-06-13T22:41:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "195abb13-a062-491f-93f8-ac40fbe13160", "eventTime": "2019-06-13T22:41:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3R0xoVUpYWGFWQmdUemt4K1pyV0dLZWhlV3FSMTEwZVdMTHExQXNTSmxWejBXQUJ4am5NUVhHTE1Ram5VcXNEcHRnS1RsLzRFSlkyUDNDSndHUDd1OTRDUGZKQXBtN1kzeFJaTVBIMGVHYVhsRXEwSWFxaWNXMEswLzF2ekplcGx5YzRPVG1BUWpDZVVUWEZEZXZ6TkJCYVJ2ZUYzekVqOWxydnJURGdtZVdkZ3FOOUE4aklkQ2VGRjl1VjdWU3o5SnlTa3oydEJRRHk2MVRtNDd3T2FsdVc0T2FKNnRJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49954-41b6-4f20-b8c1-2123e559532d2", "record_id": "flaws_cloudtrail:0000463:49954-41b6-4f20-b8c1-2123e559532d2", "row_index": 463, "timestamp": "2019-06-13T22:41:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49954-41b6-4f20-b8c1-2123e559532d2", "eventTime": "2019-06-13T22:41:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWWF5b0dGSGQrcG5NS1BKd0lQNnNvR290SmN2WmtpTEQ0SFoyUmFKQjBaZTJhaHNSZTZUWmMrTG1LaytDd3lodE02RVhuN29TbGIxUGdKNzhVanFBUW9UYllta01QQVJUdG9CaUQxU1NiTGUxOXplcGdtRE9ZVkROYU42UnZlSHkxeE5YM0s4Z0xjTE1QeFRtQnNQSm1EeDVCVGlZNUpmTTRDOEo1dnhNR0F5SC9UK2VKZG93VUhHenpzazY5dUl2WUZ3SWFqMWtGZ21DL1BVcFpBZzlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "195abb13-a062-491f-93f8-ac40fbe13160", "record_id": "flaws_cloudtrail:0000464:195abb13-a062-491f-93f8-ac40fbe13160", "row_index": 464, "timestamp": "2019-06-13T22:41:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "195abb13-a062-491f-93f8-ac40fbe13160", "eventTime": "2019-06-13T22:41:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3R0xoVUpYWGFWQmdUemt4K1pyV0dLZWhlV3FSMTEwZVdMTHExQXNTSmxWejBXQUJ4am5NUVhHTE1Ram5VcXNEcHRnS1RsLzRFSlkyUDNDSndHUDd1OTRDUGZKQXBtN1kzeFJaTVBIMGVHYVhsRXEwSWFxaWNXMEswLzF2ekplcGx5YzRPVG1BUWpDZVVUWEZEZXZ6TkJCYVJ2ZUYzekVqOWxydnJURGdtZVdkZ3FOOUE4aklkQ2VGRjl1VjdWU3o5SnlTa3oydEJRRHk2MVRtNDd3T2FsdVc0T2FKNnRJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d534123fd-6ad5-482a-a585-45af3b41fe25", "record_id": "flaws_cloudtrail:0000465:d534123fd-6ad5-482a-a585-45af3b41fe25", "row_index": 465, "timestamp": "2019-06-13T22:41:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d534123fd-6ad5-482a-a585-45af3b41fe25", "eventTime": "2019-06-13T22:41:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWNkt3cXl4dkczcmxNUTRJYThKOTFNS2FCeUxEeVlJajBZaXlVVDlnczVuLy9rQUJaenZFWkZsMHl0cnBBZnJSZXRaYWh6RDFzaVVPWnlneVZOcVVnbmxxUUNJZERvelp6WlA4RUdSMHhVQzF3WmhjRTVKTDduZlhuS1dHZ3d2SW5SdWhsZEtNOWM0NnlLVWtDTjNtSmU0VHRFTkdRUmRSN3dUK244bWFmQ2dubUV4YThpTFExeEhMTEFma0xOQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d534123fd-6ad5-482a-a585-45af3b41fe25", "record_id": "flaws_cloudtrail:0000466:d534123fd-6ad5-482a-a585-45af3b41fe25", "row_index": 466, "timestamp": "2019-06-13T22:41:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d534123fd-6ad5-482a-a585-45af3b41fe25", "eventTime": "2019-06-13T22:41:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWNkt3cXl4dkczcmxNUTRJYThKOTFNS2FCeUxEeVlJajBZaXlVVDlnczVuLy9rQUJaenZFWkZsMHl0cnBBZnJSZXRaYWh6RDFzaVVPWnlneVZOcVVnbmxxUUNJZERvelp6WlA4RUdSMHhVQzF3WmhjRTVKTDduZlhuS1dHZ3d2SW5SdWhsZEtNOWM0NnlLVWtDTjNtSmU0VHRFTkdRUmRSN3dUK244bWFmQ2dubUV4YThpTFExeEhMTEFma0xOQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ac2b159-40d7-4303-b3cc-8c3508a32e95", "record_id": "flaws_cloudtrail:0000467:1ac2b159-40d7-4303-b3cc-8c3508a32e95", "row_index": 467, "timestamp": "2019-06-13T22:48:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ac2b159-40d7-4303-b3cc-8c3508a32e95", "eventTime": "2019-06-13T22:48:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ac2b159-40d7-4303-b3cc-8c3508a32e95", "record_id": "flaws_cloudtrail:0000468:1ac2b159-40d7-4303-b3cc-8c3508a32e95", "row_index": 468, "timestamp": "2019-06-13T22:48:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ac2b159-40d7-4303-b3cc-8c3508a32e95", "eventTime": "2019-06-13T22:48:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b77434-1be9-4241-8d19-04dad91068d4", "record_id": "flaws_cloudtrail:0000469:c5b77434-1be9-4241-8d19-04dad91068d4", "row_index": 469, "timestamp": "2019-06-13T23:04:09Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b77434-1be9-4241-8d19-04dad91068d4", "eventTime": "2019-06-13T23:04:09Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b77434-1be9-4241-8d19-04dad91068d4", "record_id": "flaws_cloudtrail:0000470:c5b77434-1be9-4241-8d19-04dad91068d4", "row_index": 470, "timestamp": "2019-06-13T23:04:09Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b77434-1be9-4241-8d19-04dad91068d4", "eventTime": "2019-06-13T23:04:09Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c82c8a-84c3-4a4f-af73-25eaf2229dce", "record_id": "flaws_cloudtrail:0000471:a6c82c8a-84c3-4a4f-af73-25eaf2229dce", "row_index": 471, "timestamp": "2019-06-13T23:05:14Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c82c8a-84c3-4a4f-af73-25eaf2229dce", "eventTime": "2019-06-13T23:05:14Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c82c8a-84c3-4a4f-af73-25eaf2229dce", "record_id": "flaws_cloudtrail:0000472:a6c82c8a-84c3-4a4f-af73-25eaf2229dce", "row_index": 472, "timestamp": "2019-06-13T23:05:14Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c82c8a-84c3-4a4f-af73-25eaf2229dce", "eventTime": "2019-06-13T23:05:14Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ea035c-f3bf-4261-a9b8-5f643ca81900", "record_id": "flaws_cloudtrail:0000473:09ea035c-f3bf-4261-a9b8-5f643ca81900", "row_index": 473, "timestamp": "2019-06-13T23:06:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ea035c-f3bf-4261-a9b8-5f643ca81900", "eventTime": "2019-06-13T23:06:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ebe6f60-839d-46c4-a4da-f5c8ec891ad7", "record_id": "flaws_cloudtrail:0000474:4ebe6f60-839d-46c4-a4da-f5c8ec891ad7", "row_index": 474, "timestamp": "2019-06-13T23:06:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ebe6f60-839d-46c4-a4da-f5c8ec891ad7", "eventTime": "2019-06-13T23:06:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABnsd/WeYNw9pZQuRV5SvViPgQlE3kTATNTDyEfViPhFKRpJJL01x1aw6CGCraGXS658tj8HdItrwzP8vV1VWxfoGDNKaSqJPGC1hIHd3mNvEg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ea035c-f3bf-4261-a9b8-5f643ca81900", "record_id": "flaws_cloudtrail:0000475:09ea035c-f3bf-4261-a9b8-5f643ca81900", "row_index": 475, "timestamp": "2019-06-13T23:06:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ea035c-f3bf-4261-a9b8-5f643ca81900", "eventTime": "2019-06-13T23:06:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ebe6f60-839d-46c4-a4da-f5c8ec891ad7", "record_id": "flaws_cloudtrail:0000476:4ebe6f60-839d-46c4-a4da-f5c8ec891ad7", "row_index": 476, "timestamp": "2019-06-13T23:06:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ebe6f60-839d-46c4-a4da-f5c8ec891ad7", "eventTime": "2019-06-13T23:06:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABnsd/WeYNw9pZQuRV5SvViPgQlE3kTATNTDyEfViPhFKRpJJL01x1aw6CGCraGXS658tj8HdItrwzP8vV1VWxfoGDNKaSqJPGC1hIHd3mNvEg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae0841bb-f183-4d04-9675-48fac3b6a100", "record_id": "flaws_cloudtrail:0000477:ae0841bb-f183-4d04-9675-48fac3b6a100", "row_index": 477, "timestamp": "2019-06-13T23:06:26Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae0841bb-f183-4d04-9675-48fac3b6a100", "eventTime": "2019-06-13T23:06:26Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAJ0bkNk8wgKgxB8uYhRJclT3mDeYHgW2o6Oj5O8yzw9c2wz7R/bedS3Gx7TcUei3kTSfERTMZj8cyS7cw0Fc+ZFkiNpF+xsfv4AvgqqmvXunA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026092-38fd-4375-8c93-2c3d9c97abb6", "record_id": "flaws_cloudtrail:0000478:026092-38fd-4375-8c93-2c3d9c97abb6", "row_index": 478, "timestamp": "2019-06-13T23:06:26Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026092-38fd-4375-8c93-2c3d9c97abb6", "eventTime": "2019-06-13T23:06:26Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABdO+1toOuJ5+/uOcJl4NfdFAcm0N1/Cyrq1rgs+0nRHf1lABrsHuER6LXU9b0Hhe/RYhlAU6WvNNh+7EZQmkv5PDTEyCh8oUgV5sJG+Oumcug==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f188620c-5d27-4a44-acf0-da62231ab82", "record_id": "flaws_cloudtrail:0000479:4f188620c-5d27-4a44-acf0-da62231ab82", "row_index": 479, "timestamp": "2019-06-13T23:06:26Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f188620c-5d27-4a44-acf0-da62231ab82", "eventTime": "2019-06-13T23:06:26Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACHyKEzNT2Zfi5A34b3gGwvMLLDnTZuRQSKgEaolnhykHZ0ECevKn5yKVpcshCcZFe/ecBBoqHP9g2FvvDQDYTIPGtO0B+bRUOxQf75bzqoIKw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae0841bb-f183-4d04-9675-48fac3b6a100", "record_id": "flaws_cloudtrail:0000480:ae0841bb-f183-4d04-9675-48fac3b6a100", "row_index": 480, "timestamp": "2019-06-13T23:06:26Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae0841bb-f183-4d04-9675-48fac3b6a100", "eventTime": "2019-06-13T23:06:26Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAJ0bkNk8wgKgxB8uYhRJclT3mDeYHgW2o6Oj5O8yzw9c2wz7R/bedS3Gx7TcUei3kTSfERTMZj8cyS7cw0Fc+ZFkiNpF+xsfv4AvgqqmvXunA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026092-38fd-4375-8c93-2c3d9c97abb6", "record_id": "flaws_cloudtrail:0000481:026092-38fd-4375-8c93-2c3d9c97abb6", "row_index": 481, "timestamp": "2019-06-13T23:06:26Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026092-38fd-4375-8c93-2c3d9c97abb6", "eventTime": "2019-06-13T23:06:26Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABdO+1toOuJ5+/uOcJl4NfdFAcm0N1/Cyrq1rgs+0nRHf1lABrsHuER6LXU9b0Hhe/RYhlAU6WvNNh+7EZQmkv5PDTEyCh8oUgV5sJG+Oumcug==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f188620c-5d27-4a44-acf0-da62231ab82", "record_id": "flaws_cloudtrail:0000482:4f188620c-5d27-4a44-acf0-da62231ab82", "row_index": 482, "timestamp": "2019-06-13T23:06:26Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f188620c-5d27-4a44-acf0-da62231ab82", "eventTime": "2019-06-13T23:06:26Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACHyKEzNT2Zfi5A34b3gGwvMLLDnTZuRQSKgEaolnhykHZ0ECevKn5yKVpcshCcZFe/ecBBoqHP9g2FvvDQDYTIPGtO0B+bRUOxQf75bzqoIKw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32237-06d7-4b37-a4c3-b9918e4f30b0", "record_id": "flaws_cloudtrail:0000483:32237-06d7-4b37-a4c3-b9918e4f30b0", "row_index": 483, "timestamp": "2019-06-13T23:06:27Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32237-06d7-4b37-a4c3-b9918e4f30b0", "eventTime": "2019-06-13T23:06:27Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABodqETv9Q2SY6luwf90+XWijbF4WJUIm47vBwmeiii1ccub9Hmqs4OuIwaWrAJe3Qvo3bS2ca+JMKNZU4DuUoGlQsnUxtyoeG+iOMJ1d3S61w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32237-06d7-4b37-a4c3-b9918e4f30b0", "record_id": "flaws_cloudtrail:0000484:32237-06d7-4b37-a4c3-b9918e4f30b0", "row_index": 484, "timestamp": "2019-06-13T23:06:27Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32237-06d7-4b37-a4c3-b9918e4f30b0", "eventTime": "2019-06-13T23:06:27Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABodqETv9Q2SY6luwf90+XWijbF4WJUIm47vBwmeiii1ccub9Hmqs4OuIwaWrAJe3Qvo3bS2ca+JMKNZU4DuUoGlQsnUxtyoeG+iOMJ1d3S61w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaffcc8-7bff-48d8-b5e2-8880dff8a93e", "record_id": "flaws_cloudtrail:0000485:fdaffcc8-7bff-48d8-b5e2-8880dff8a93e", "row_index": 485, "timestamp": "2019-06-13T23:07:04Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaffcc8-7bff-48d8-b5e2-8880dff8a93e", "eventTime": "2019-06-13T23:07:04Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaffcc8-7bff-48d8-b5e2-8880dff8a93e", "record_id": "flaws_cloudtrail:0000486:fdaffcc8-7bff-48d8-b5e2-8880dff8a93e", "row_index": 486, "timestamp": "2019-06-13T23:07:04Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaffcc8-7bff-48d8-b5e2-8880dff8a93e", "eventTime": "2019-06-13T23:07:04Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181b6d31-25ba-429c-90b7-b3b7f4db6402", "record_id": "flaws_cloudtrail:0000487:181b6d31-25ba-429c-90b7-b3b7f4db6402", "row_index": 487, "timestamp": "2019-06-13T23:08:44Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181b6d31-25ba-429c-90b7-b3b7f4db6402", "eventTime": "2019-06-13T23:08:44Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181b6d31-25ba-429c-90b7-b3b7f4db6402", "record_id": "flaws_cloudtrail:0000488:181b6d31-25ba-429c-90b7-b3b7f4db6402", "row_index": 488, "timestamp": "2019-06-13T23:08:44Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181b6d31-25ba-429c-90b7-b3b7f4db6402", "eventTime": "2019-06-13T23:08:44Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1a19c0b-f2b8-4b72-8d7a-4a1bddf43671", "record_id": "flaws_cloudtrail:0000489:d1a19c0b-f2b8-4b72-8d7a-4a1bddf43671", "row_index": 489, "timestamp": "2019-06-13T23:09:03Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1a19c0b-f2b8-4b72-8d7a-4a1bddf43671", "eventTime": "2019-06-13T23:09:03Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1a19c0b-f2b8-4b72-8d7a-4a1bddf43671", "record_id": "flaws_cloudtrail:0000490:d1a19c0b-f2b8-4b72-8d7a-4a1bddf43671", "row_index": 490, "timestamp": "2019-06-13T23:09:03Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1a19c0b-f2b8-4b72-8d7a-4a1bddf43671", "eventTime": "2019-06-13T23:09:03Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb833e4-0f61-441e-a19d-f798e8c04534", "record_id": "flaws_cloudtrail:0000491:dfb833e4-0f61-441e-a19d-f798e8c04534", "row_index": 491, "timestamp": "2019-06-13T23:09:32Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb833e4-0f61-441e-a19d-f798e8c04534", "eventTime": "2019-06-13T23:09:32Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb833e4-0f61-441e-a19d-f798e8c04534", "record_id": "flaws_cloudtrail:0000492:dfb833e4-0f61-441e-a19d-f798e8c04534", "row_index": 492, "timestamp": "2019-06-13T23:09:32Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb833e4-0f61-441e-a19d-f798e8c04534", "eventTime": "2019-06-13T23:09:32Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "780d036d-7b59-4bf0-af08-862373b867ba2", "record_id": "flaws_cloudtrail:0000493:780d036d-7b59-4bf0-af08-862373b867ba2", "row_index": 493, "timestamp": "2019-06-13T23:10:45Z", "event_type": "ListGateways", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "780d036d-7b59-4bf0-af08-862373b867ba2", "eventTime": "2019-06-13T23:10:45Z", "eventName": "ListGateways", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "780d036d-7b59-4bf0-af08-862373b867ba2", "record_id": "flaws_cloudtrail:0000494:780d036d-7b59-4bf0-af08-862373b867ba2", "row_index": 494, "timestamp": "2019-06-13T23:10:45Z", "event_type": "ListGateways", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "780d036d-7b59-4bf0-af08-862373b867ba2", "eventTime": "2019-06-13T23:10:45Z", "eventName": "ListGateways", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac7aa2ce-6442-4f98-96b0-3a1650e20f0e", "record_id": "flaws_cloudtrail:0000495:ac7aa2ce-6442-4f98-96b0-3a1650e20f0e", "row_index": 495, "timestamp": "2019-06-13T23:10:48Z", "event_type": "ListGateways", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac7aa2ce-6442-4f98-96b0-3a1650e20f0e", "eventTime": "2019-06-13T23:10:48Z", "eventName": "ListGateways", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac7aa2ce-6442-4f98-96b0-3a1650e20f0e", "record_id": "flaws_cloudtrail:0000496:ac7aa2ce-6442-4f98-96b0-3a1650e20f0e", "row_index": 496, "timestamp": "2019-06-13T23:10:48Z", "event_type": "ListGateways", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac7aa2ce-6442-4f98-96b0-3a1650e20f0e", "eventTime": "2019-06-13T23:10:48Z", "eventName": "ListGateways", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c1e7ebf-59d8-4071-a3eb-eaed4d1b388d", "record_id": "flaws_cloudtrail:0000497:7c1e7ebf-59d8-4071-a3eb-eaed4d1b388d", "row_index": 497, "timestamp": "2019-06-13T23:11:46Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c1e7ebf-59d8-4071-a3eb-eaed4d1b388d", "eventTime": "2019-06-13T23:11:46Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c1e7ebf-59d8-4071-a3eb-eaed4d1b388d", "record_id": "flaws_cloudtrail:0000498:7c1e7ebf-59d8-4071-a3eb-eaed4d1b388d", "row_index": 498, "timestamp": "2019-06-13T23:11:46Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c1e7ebf-59d8-4071-a3eb-eaed4d1b388d", "eventTime": "2019-06-13T23:11:46Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20ff8aad-9538-4be2-b27d-ff635f8fe6e1", "record_id": "flaws_cloudtrail:0000499:20ff8aad-9538-4be2-b27d-ff635f8fe6e1", "row_index": 499, "timestamp": "2019-06-13T23:13:11Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20ff8aad-9538-4be2-b27d-ff635f8fe6e1", "eventTime": "2019-06-13T23:13:11Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20ff8aad-9538-4be2-b27d-ff635f8fe6e1", "record_id": "flaws_cloudtrail:0000500:20ff8aad-9538-4be2-b27d-ff635f8fe6e1", "row_index": 500, "timestamp": "2019-06-13T23:13:11Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20ff8aad-9538-4be2-b27d-ff635f8fe6e1", "eventTime": "2019-06-13T23:13:11Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "487e2b6d-e9c1-400d-8e80-91d00bfef396", "record_id": "flaws_cloudtrail:0000501:487e2b6d-e9c1-400d-8e80-91d00bfef396", "row_index": 501, "timestamp": "2019-06-13T23:13:35Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "487e2b6d-e9c1-400d-8e80-91d00bfef396", "eventTime": "2019-06-13T23:13:35Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "487e2b6d-e9c1-400d-8e80-91d00bfef396", "record_id": "flaws_cloudtrail:0000502:487e2b6d-e9c1-400d-8e80-91d00bfef396", "row_index": 502, "timestamp": "2019-06-13T23:13:35Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "487e2b6d-e9c1-400d-8e80-91d00bfef396", "eventTime": "2019-06-13T23:13:35Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a0d5f09-773f-4dc1-aef7-62dd30c261cf", "record_id": "flaws_cloudtrail:0000503:5a0d5f09-773f-4dc1-aef7-62dd30c261cf", "row_index": 503, "timestamp": "2019-06-13T23:15:42Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a0d5f09-773f-4dc1-aef7-62dd30c261cf", "eventTime": "2019-06-13T23:15:42Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:8537f7485201bbb44afa6a01509d6e58", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "8537f7485201bbb44afa6a01509d6e58", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a0d5f09-773f-4dc1-aef7-62dd30c261cf", "record_id": "flaws_cloudtrail:0000504:5a0d5f09-773f-4dc1-aef7-62dd30c261cf", "row_index": 504, "timestamp": "2019-06-13T23:15:42Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a0d5f09-773f-4dc1-aef7-62dd30c261cf", "eventTime": "2019-06-13T23:15:42Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:8537f7485201bbb44afa6a01509d6e58", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "8537f7485201bbb44afa6a01509d6e58", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50029bc7-dc41-455f-af71-a503a67d2fc2", "record_id": "flaws_cloudtrail:0000505:50029bc7-dc41-455f-af71-a503a67d2fc2", "row_index": 505, "timestamp": "2019-06-13T23:15:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50029bc7-dc41-455f-af71-a503a67d2fc2", "eventTime": "2019-06-13T23:15:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50029bc7-dc41-455f-af71-a503a67d2fc2", "record_id": "flaws_cloudtrail:0000506:50029bc7-dc41-455f-af71-a503a67d2fc2", "row_index": 506, "timestamp": "2019-06-13T23:15:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.6.218.152", "user_agent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50029bc7-dc41-455f-af71-a503a67d2fc2", "eventTime": "2019-06-13T23:15:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.6.218.152", "userAgent": "aws-cli/1.16.176 Python/3.7.3 Darwin/18.6.0 botocore/1.12.166", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8d9c7c4-44d7-4af8-b9cd-10c0923189b8", "record_id": "flaws_cloudtrail:0000507:c8d9c7c4-44d7-4af8-b9cd-10c0923189b8", "row_index": 507, "timestamp": "2019-06-13T23:15:49Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8d9c7c4-44d7-4af8-b9cd-10c0923189b8", "eventTime": "2019-06-13T23:15:49Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8d9c7c4-44d7-4af8-b9cd-10c0923189b8", "record_id": "flaws_cloudtrail:0000508:c8d9c7c4-44d7-4af8-b9cd-10c0923189b8", "row_index": 508, "timestamp": "2019-06-13T23:15:49Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8d9c7c4-44d7-4af8-b9cd-10c0923189b8", "eventTime": "2019-06-13T23:15:49Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a88c37d8-435d-4a43-af0a-cba84771dc52", "record_id": "flaws_cloudtrail:0000509:a88c37d8-435d-4a43-af0a-cba84771dc52", "row_index": 509, "timestamp": "2019-06-13T23:16:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a88c37d8-435d-4a43-af0a-cba84771dc52", "eventTime": "2019-06-13T23:16:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "811596193553", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a88c37d8-435d-4a43-af0a-cba84771dc52", "record_id": "flaws_cloudtrail:0000510:a88c37d8-435d-4a43-af0a-cba84771dc52", "row_index": 510, "timestamp": "2019-06-13T23:16:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a88c37d8-435d-4a43-af0a-cba84771dc52", "eventTime": "2019-06-13T23:16:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "811596193553", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee0e2dd9-8d20-4347-8c05-3c85f682814c5", "record_id": "flaws_cloudtrail:0000511:ee0e2dd9-8d20-4347-8c05-3c85f682814c5", "row_index": 511, "timestamp": "2019-06-13T23:16:39Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee0e2dd9-8d20-4347-8c05-3c85f682814c5", "eventTime": "2019-06-13T23:16:39Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:22f11426-9080-4403-bf4d-d86b1f5005d3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "22f11426-9080-4403-bf4d-d86b1f5005d3", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee0e2dd9-8d20-4347-8c05-3c85f682814c5", "record_id": "flaws_cloudtrail:0000512:ee0e2dd9-8d20-4347-8c05-3c85f682814c5", "row_index": 512, "timestamp": "2019-06-13T23:16:39Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee0e2dd9-8d20-4347-8c05-3c85f682814c5", "eventTime": "2019-06-13T23:16:39Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:22f11426-9080-4403-bf4d-d86b1f5005d3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "22f11426-9080-4403-bf4d-d86b1f5005d3", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fadfa341-9c1d-4565-bcb9-3f15cddcd044", "record_id": "flaws_cloudtrail:0000513:fadfa341-9c1d-4565-bcb9-3f15cddcd044", "row_index": 513, "timestamp": "2019-06-13T23:17:12Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fadfa341-9c1d-4565-bcb9-3f15cddcd044", "eventTime": "2019-06-13T23:17:12Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fadfa341-9c1d-4565-bcb9-3f15cddcd044", "record_id": "flaws_cloudtrail:0000514:fadfa341-9c1d-4565-bcb9-3f15cddcd044", "row_index": 514, "timestamp": "2019-06-13T23:17:12Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fadfa341-9c1d-4565-bcb9-3f15cddcd044", "eventTime": "2019-06-13T23:17:12Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d806ce5-05e0-47a9-b183-30125eaf06", "record_id": "flaws_cloudtrail:0000515:3d806ce5-05e0-47a9-b183-30125eaf06", "row_index": 515, "timestamp": "2019-06-13T23:20:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1626, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d806ce5-05e0-47a9-b183-30125eaf06", "eventTime": "2019-06-13T23:20:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8BE924X9BW89UD6X", "expiration": "Jun 14, 2019 11:20:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24eb036d-d8ea-4a40-8275-8e772493aa", "record_id": "flaws_cloudtrail:0000516:24eb036d-d8ea-4a40-8275-8e772493aa", "row_index": 516, "timestamp": "2019-06-13T23:20:02Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA8BE924X9BW89UD6X", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "239.138.207.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24eb036d-d8ea-4a40-8275-8e772493aa", "eventTime": "2019-06-13T23:20:02Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "239.138.207.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA8BE924X9BW89UD6X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T23:20:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/13/[$LATEST]bfa0b83365843f029099cc64c78104cd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c5b984-b7de-4ae8-ba4d-2c0aa770bd33", "record_id": "flaws_cloudtrail:0000517:c5c5b984-b7de-4ae8-ba4d-2c0aa770bd33", "row_index": 517, "timestamp": "2019-06-13T23:20:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c5b984-b7de-4ae8-ba4d-2c0aa770bd33", "eventTime": "2019-06-13T23:20:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT99JFMVZH8Y55HCE", "expiration": "Jun 14, 2019 11:20:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d806ce5-05e0-47a9-b183-30125eaf06", "record_id": "flaws_cloudtrail:0000518:3d806ce5-05e0-47a9-b183-30125eaf06", "row_index": 518, "timestamp": "2019-06-13T23:20:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1626, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d806ce5-05e0-47a9-b183-30125eaf06", "eventTime": "2019-06-13T23:20:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8BE924X9BW89UD6X", "expiration": "Jun 14, 2019 11:20:02 AM", "sessionToken": "AgoJb3JpZ2luX2VjELj//////////wEaCXVzLXdlc3QtMiJGMEQCIFVQz8mT96OuLA4N5JVoVyps+5iN8HZ0KohaLX1ywDYJAiBaP33UumK0oO+blnPvVmd1HfrKml3l2PxY8gSSxnHp5SqLAgjg//////////8BEAAaDDk3NTQyNjI2MjAyOSIMcmd/K1Snji+1yVcjKt8BD3cxqOekbzLYRDwO/S9pa7HtedMqJMSqaQC67MxrDX1OXpu7tM0UPNhMiyknhvh1lCdPs1pfb5RPLjRajaq2HSw4WWHSJy9UYieVNkfqv74b8ujTvUIWicyATH6tEXaHRsgmPoJRIumCv8kVs3jTBpn0rRf2TnCIrVRQZa11k2zhpEo0gNfgpKdMY/61par5l/0EEcsRLLGFdpNAPWi715rGtzjTwzfPZkAR6n8ugU7W6xbKM+TTC3Mtf/bxLt7QgPhGscd3TQcNCZRK8h6eeSBiRapFxaC8ZVeOU1sMRTCitIvoBTq1ARDArmFhMWAoubvwaVj31Hvj/J6qoKKUC4HsaoxH8iOab504VD3EKsThiy6lGARtxuOP5zc5mrREh6Cg2M1xlM1AryWSGhHaaDpMrRS4Hiu31iYRSITBD27F5QTGOt/JVSyCktc19xFm9iPBINSFz95b3H4DnF33uM3CH1SEPZPd19Fbv0F+2YGvxeuIht/TiM4e7Aty6Hwc0ISOQA/CuE2VU3oIwr7gPpKWy4qGo4aisT6KXO8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24eb036d-d8ea-4a40-8275-8e772493aa", "record_id": "flaws_cloudtrail:0000519:24eb036d-d8ea-4a40-8275-8e772493aa", "row_index": 519, "timestamp": "2019-06-13T23:20:02Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA8BE924X9BW89UD6X", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "239.138.207.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24eb036d-d8ea-4a40-8275-8e772493aa", "eventTime": "2019-06-13T23:20:02Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "239.138.207.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA8BE924X9BW89UD6X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T23:20:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/13/[$LATEST]bfa0b83365843f029099cc64c78104cd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c5b984-b7de-4ae8-ba4d-2c0aa770bd33", "record_id": "flaws_cloudtrail:0000520:c5c5b984-b7de-4ae8-ba4d-2c0aa770bd33", "row_index": 520, "timestamp": "2019-06-13T23:20:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c5b984-b7de-4ae8-ba4d-2c0aa770bd33", "eventTime": "2019-06-13T23:20:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT99JFMVZH8Y55HCE", "expiration": "Jun 14, 2019 11:20:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d1bd9a-4803-4082-9223-a96f64960", "record_id": "flaws_cloudtrail:0000521:48d1bd9a-4803-4082-9223-a96f64960", "row_index": 521, "timestamp": "2019-06-13T23:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d1bd9a-4803-4082-9223-a96f64960", "eventTime": "2019-06-13T23:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASZ48ITRXFEWI9GIY", "expiration": "Jun 14, 2019 5:30:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d1bd9a-4803-4082-9223-a96f64960", "record_id": "flaws_cloudtrail:0000522:48d1bd9a-4803-4082-9223-a96f64960", "row_index": 522, "timestamp": "2019-06-13T23:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d1bd9a-4803-4082-9223-a96f64960", "eventTime": "2019-06-13T23:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASZ48ITRXFEWI9GIY", "expiration": "Jun 14, 2019 5:30:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c56072a-04cf-409c-ab35-255aca7a46a9", "record_id": "flaws_cloudtrail:0000523:7c56072a-04cf-409c-ab35-255aca7a46a9", "row_index": 523, "timestamp": "2019-06-14T00:02:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c56072a-04cf-409c-ab35-255aca7a46a9", "eventTime": "2019-06-14T00:02:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c56072a-04cf-409c-ab35-255aca7a46a9", "record_id": "flaws_cloudtrail:0000524:7c56072a-04cf-409c-ab35-255aca7a46a9", "row_index": 524, "timestamp": "2019-06-14T00:02:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c56072a-04cf-409c-ab35-255aca7a46a9", "eventTime": "2019-06-14T00:02:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e100aea9-bc70-4b9e-b8e4-d6fb087dfffb", "record_id": "flaws_cloudtrail:0000525:e100aea9-bc70-4b9e-b8e4-d6fb087dfffb", "row_index": 525, "timestamp": "2019-06-14T00:03:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e100aea9-bc70-4b9e-b8e4-d6fb087dfffb", "eventTime": "2019-06-14T00:03:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e100aea9-bc70-4b9e-b8e4-d6fb087dfffb", "record_id": "flaws_cloudtrail:0000526:e100aea9-bc70-4b9e-b8e4-d6fb087dfffb", "row_index": 526, "timestamp": "2019-06-14T00:03:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e100aea9-bc70-4b9e-b8e4-d6fb087dfffb", "eventTime": "2019-06-14T00:03:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f19186-13f3-4dc5-8466-c71dda8f47bd", "record_id": "flaws_cloudtrail:0000527:0f19186-13f3-4dc5-8466-c71dda8f47bd", "row_index": 527, "timestamp": "2019-06-14T00:04:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f19186-13f3-4dc5-8466-c71dda8f47bd", "eventTime": "2019-06-14T00:04:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f19186-13f3-4dc5-8466-c71dda8f47bd", "record_id": "flaws_cloudtrail:0000528:0f19186-13f3-4dc5-8466-c71dda8f47bd", "row_index": 528, "timestamp": "2019-06-14T00:04:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f19186-13f3-4dc5-8466-c71dda8f47bd", "eventTime": "2019-06-14T00:04:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f784315d-66fb-41eb-b182-e7b45b5a7207", "record_id": "flaws_cloudtrail:0000529:f784315d-66fb-41eb-b182-e7b45b5a7207", "row_index": 529, "timestamp": "2019-06-14T00:14:03Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIACVPLOHYWJ5RD62Z8", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1195, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f784315d-66fb-41eb-b182-e7b45b5a7207", "eventTime": "2019-06-14T00:14:03Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetPolicy on resource: policy arn:aws:iam::811596193553:policy/list_apigateways", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIACVPLOHYWJ5RD62Z8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T22:26:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f784315d-66fb-41eb-b182-e7b45b5a7207", "record_id": "flaws_cloudtrail:0000530:f784315d-66fb-41eb-b182-e7b45b5a7207", "row_index": 530, "timestamp": "2019-06-14T00:14:03Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIACVPLOHYWJ5RD62Z8", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "0.52.31.206", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1195, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f784315d-66fb-41eb-b182-e7b45b5a7207", "eventTime": "2019-06-14T00:14:03Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetPolicy on resource: policy arn:aws:iam::811596193553:policy/list_apigateways", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIACVPLOHYWJ5RD62Z8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T22:26:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b556f9dd-7d7d-42ed-a4d7-af10e519038af", "record_id": "flaws_cloudtrail:0000531:b556f9dd-7d7d-42ed-a4d7-af10e519038af", "row_index": 531, "timestamp": "2019-06-14T00:15:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b556f9dd-7d7d-42ed-a4d7-af10e519038af", "eventTime": "2019-06-14T00:15:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIADPUJTEGL5G0GLNLR", "expiration": "Jun 14, 2019 12:15:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123365-be12-41cb-bbc4-aa4d3dcf87a4", "record_id": "flaws_cloudtrail:0000532:123365-be12-41cb-bbc4-aa4d3dcf87a4", "row_index": 532, "timestamp": "2019-06-14T00:15:06Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA8BE924X9BW89UD6X", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "24.204.2.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123365-be12-41cb-bbc4-aa4d3dcf87a4", "eventTime": "2019-06-14T00:15:06Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.204.2.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA8BE924X9BW89UD6X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T23:20:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/14/[$LATEST]95b6ca5f72810b42a763c29e6099a9d6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b556f9dd-7d7d-42ed-a4d7-af10e519038af", "record_id": "flaws_cloudtrail:0000533:b556f9dd-7d7d-42ed-a4d7-af10e519038af", "row_index": 533, "timestamp": "2019-06-14T00:15:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b556f9dd-7d7d-42ed-a4d7-af10e519038af", "eventTime": "2019-06-14T00:15:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIADPUJTEGL5G0GLNLR", "expiration": "Jun 14, 2019 12:15:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123365-be12-41cb-bbc4-aa4d3dcf87a4", "record_id": "flaws_cloudtrail:0000534:123365-be12-41cb-bbc4-aa4d3dcf87a4", "row_index": 534, "timestamp": "2019-06-14T00:15:06Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA8BE924X9BW89UD6X", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "24.204.2.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123365-be12-41cb-bbc4-aa4d3dcf87a4", "eventTime": "2019-06-14T00:15:06Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.204.2.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA8BE924X9BW89UD6X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-13T23:20:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/14/[$LATEST]95b6ca5f72810b42a763c29e6099a9d6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b125545-ccaf-4680-88c3-db933e2db8b6", "record_id": "flaws_cloudtrail:0000535:39b125545-ccaf-4680-88c3-db933e2db8b6", "row_index": 535, "timestamp": "2019-06-14T00:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1898, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b125545-ccaf-4680-88c3-db933e2db8b6", "eventTime": "2019-06-14T00:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI84TEQNOO7M28HGO", "expiration": "Jun 14, 2019 6:48:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b125545-ccaf-4680-88c3-db933e2db8b6", "record_id": "flaws_cloudtrail:0000536:39b125545-ccaf-4680-88c3-db933e2db8b6", "row_index": 536, "timestamp": "2019-06-14T00:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1898, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b125545-ccaf-4680-88c3-db933e2db8b6", "eventTime": "2019-06-14T00:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI84TEQNOO7M28HGO", "expiration": "Jun 14, 2019 6:48:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd7d2261-8709-4bee-ab7a-dca8effcf7ae", "record_id": "flaws_cloudtrail:0000537:fd7d2261-8709-4bee-ab7a-dca8effcf7ae", "row_index": 537, "timestamp": "2019-06-14T00:28:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd7d2261-8709-4bee-ab7a-dca8effcf7ae", "eventTime": "2019-06-14T00:28:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT2MV94J4TRL991NJ", "expiration": "Jun 14, 2019 1:28:25 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd7d2261-8709-4bee-ab7a-dca8effcf7ae", "record_id": "flaws_cloudtrail:0000538:fd7d2261-8709-4bee-ab7a-dca8effcf7ae", "row_index": 538, "timestamp": "2019-06-14T00:28:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd7d2261-8709-4bee-ab7a-dca8effcf7ae", "eventTime": "2019-06-14T00:28:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT2MV94J4TRL991NJ", "expiration": "Jun 14, 2019 1:28:25 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b4822d-4f2b-445c-8786-4492f43c97bb", "record_id": "flaws_cloudtrail:0000539:31b4822d-4f2b-445c-8786-4492f43c97bb", "row_index": 539, "timestamp": "2019-06-14T01:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b4822d-4f2b-445c-8786-4492f43c97bb", "eventTime": "2019-06-14T01:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHJDWFAXB9J2IRAPZ", "expiration": "Jun 14, 2019 8:00:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b4822d-4f2b-445c-8786-4492f43c97bb", "record_id": "flaws_cloudtrail:0000540:31b4822d-4f2b-445c-8786-4492f43c97bb", "row_index": 540, "timestamp": "2019-06-14T01:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b4822d-4f2b-445c-8786-4492f43c97bb", "eventTime": "2019-06-14T01:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHJDWFAXB9J2IRAPZ", "expiration": "Jun 14, 2019 8:00:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e09150-bbfe-4863-855c-9378995c6293", "record_id": "flaws_cloudtrail:0000541:83e09150-bbfe-4863-855c-9378995c6293", "row_index": 541, "timestamp": "2019-06-14T02:13:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 533, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e09150-bbfe-4863-855c-9378995c6293", "eventTime": "2019-06-14T02:13:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c23b29d9-0e9d-49cc-a1fc-5495ba69d136", "record_id": "flaws_cloudtrail:0000542:c23b29d9-0e9d-49cc-a1fc-5495ba69d136", "row_index": 542, "timestamp": "2019-06-14T02:14:09Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 562, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c23b29d9-0e9d-49cc-a1fc-5495ba69d136", "eventTime": "2019-06-14T02:14:09Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8428d17-83fd-4ba4-b754-f756a4833b9f", "record_id": "flaws_cloudtrail:0000543:b8428d17-83fd-4ba4-b754-f756a4833b9f", "row_index": 543, "timestamp": "2019-06-14T02:15:36Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 562, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8428d17-83fd-4ba4-b754-f756a4833b9f", "eventTime": "2019-06-14T02:15:36Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a24429-a63d-4f7c-9223-47929bd40e1d", "record_id": "flaws_cloudtrail:0000544:60a24429-a63d-4f7c-9223-47929bd40e1d", "row_index": 544, "timestamp": "2019-06-14T02:16:31Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 565, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a24429-a63d-4f7c-9223-47929bd40e1d", "eventTime": "2019-06-14T02:16:31Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a2f9cca-43d9-435e-91e6-66fd56f60275", "record_id": "flaws_cloudtrail:0000545:3a2f9cca-43d9-435e-91e6-66fd56f60275", "row_index": 545, "timestamp": "2019-06-14T02:17:06Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 563, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a2f9cca-43d9-435e-91e6-66fd56f60275", "eventTime": "2019-06-14T02:17:06Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "457a44ab-4ad4-4d1d-9f4e-c5cd276f501b", "record_id": "flaws_cloudtrail:0000546:457a44ab-4ad4-4d1d-9f4e-c5cd276f501b", "row_index": 546, "timestamp": "2019-06-14T02:17:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 533, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "457a44ab-4ad4-4d1d-9f4e-c5cd276f501b", "eventTime": "2019-06-14T02:17:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5125cb75-e25d-46b8-b2eb-8c867d6f242f", "record_id": "flaws_cloudtrail:0000547:5125cb75-e25d-46b8-b2eb-8c867d6f242f", "row_index": 547, "timestamp": "2019-06-14T02:18:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5125cb75-e25d-46b8-b2eb-8c867d6f242f", "eventTime": "2019-06-14T02:18:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2536f459-a5a0-4321-ac79-84f52132cdef", "record_id": "flaws_cloudtrail:0000548:2536f459-a5a0-4321-ac79-84f52132cdef", "row_index": 548, "timestamp": "2019-06-14T02:19:30Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 538, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2536f459-a5a0-4321-ac79-84f52132cdef", "eventTime": "2019-06-14T02:19:30Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47c707a3-4c59-42fa-a15b-81498fe073af", "record_id": "flaws_cloudtrail:0000549:47c707a3-4c59-42fa-a15b-81498fe073af", "row_index": 549, "timestamp": "2019-06-14T02:20:18Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47c707a3-4c59-42fa-a15b-81498fe073af", "eventTime": "2019-06-14T02:20:18Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c189a22b-1f00-4db1-ac52-e3aad5470a42", "record_id": "flaws_cloudtrail:0000550:c189a22b-1f00-4db1-ac52-e3aad5470a42", "row_index": 550, "timestamp": "2019-06-14T02:21:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c189a22b-1f00-4db1-ac52-e3aad5470a42", "eventTime": "2019-06-14T02:21:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28801a85-5860-4f80-865f-5b911cafb611", "record_id": "flaws_cloudtrail:0000551:28801a85-5860-4f80-865f-5b911cafb611", "row_index": 551, "timestamp": "2019-06-14T02:22:52Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28801a85-5860-4f80-865f-5b911cafb611", "eventTime": "2019-06-14T02:22:52Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964db0b8-7cc4-4640-89a1-90cc6fa38c08", "record_id": "flaws_cloudtrail:0000552:964db0b8-7cc4-4640-89a1-90cc6fa38c08", "row_index": 552, "timestamp": "2019-06-14T02:23:59Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAD0167BLJO4EETYZN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "65.93.73.124", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 535, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964db0b8-7cc4-4640-89a1-90cc6fa38c08", "eventTime": "2019-06-14T02:23:59Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.93.73.124", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAD0167BLJO4EETYZN", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df5bcb8-fe54-43d2-8adc-8261e4ff8d6c", "record_id": "flaws_cloudtrail:0000553:8df5bcb8-fe54-43d2-8adc-8261e4ff8d6c", "row_index": 553, "timestamp": "2019-06-14T02:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df5bcb8-fe54-43d2-8adc-8261e4ff8d6c", "eventTime": "2019-06-14T02:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMP9WOZLCOO3I98I7", "expiration": "Jun 14, 2019 9:00:13 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df5bcb8-fe54-43d2-8adc-8261e4ff8d6c", "record_id": "flaws_cloudtrail:0000554:8df5bcb8-fe54-43d2-8adc-8261e4ff8d6c", "row_index": 554, "timestamp": "2019-06-14T02:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df5bcb8-fe54-43d2-8adc-8261e4ff8d6c", "eventTime": "2019-06-14T02:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMP9WOZLCOO3I98I7", "expiration": "Jun 14, 2019 9:00:13 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "931997be4-67a7-43c1-93d8-51b3e309801a7", "record_id": "flaws_cloudtrail:0000555:931997be4-67a7-43c1-93d8-51b3e309801a7", "row_index": 555, "timestamp": "2019-06-14T03:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1896, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "931997be4-67a7-43c1-93d8-51b3e309801a7", "eventTime": "2019-06-14T03:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7OXOTQEXJDMH8XE8", "expiration": "Jun 14, 2019 9:50:06 AM", "sessionToken": "AgoJb3JpZ2luX2VjELz//////////wEaCXVzLXdlc3QtMiJHMEUCIDxQaKpwudPbUTQBHvLfQt6NkQGmFtkHSPsuFwVPRV+vAiEAvCk1fIHABa0iOD0obwXwFEaF5WBvo9w1XnW52/Hfh4wq4wMI5f//////////ARAAGgw5NzU0MjYyNjIwMjkiDAAu01lw3Safu8FbSiq3A42yNZOU0miW9bSTXIzA3GZ0XTZSyfNJwLjlV4dp1xoNt9FgxjSpf2pXEqQsWmy9LYGw29hAvsQYsHdM8/h/MJmPEXPhH5bsXQaW27tNzqJeuuhlzLIekpwI2Ulms/lUUyjb3wP/wDHOk+B3eZpYfM4lF8uF/Al9kQfGJqlBwR58xRF/+hnmYwnfBTDzjH24GA9ak77Ldwoiy3brTMub3dWt6+YjDDc1Yt0ReYlm71ZLSBCYszS7TCCSvo/uUctjHo7CQ4FgEZTXsCqpJhYK9Z0YF2R5FDy6nBMzNAsI0dKtIuV2VzsgYnBLksQlvwhsA1KIPEp29UBUBDs+E96WEGPuueYZ1FuNc4cVQyz3drVdaMAEmP+ZJP/ykm7+uKvMRvE79OHq1TPcJb+63x2Qt2P7NgHDn6YyC4TUHbIeOHvjD/0OMosCBaS0EGIQEGw81LCclKyNGPNR1As60o5UwnGG3IDvw8PjvcUxzk4Ejs5warlxDsDzLuCD3DJi1X8C12RDggye9u4vT0TRt6zZEfh83LwdTTAYScTP8vd8+H7CMAh25lh986uIKBB439H1FXu6OTCFrxAw9KeM6AU6tAHxBbSFYFIi5nLBYEejs2/v38wJ3MM3wfLRz2sEsu2gY/5WWnc7mqyAw5PJ1h6C0ulAdVLuHlfnyYFjkcgGo3IpAntscX4LW8FZ7b6qBLBiUKgyMyYSP/iFr8FBjpRn8KZqlbFFI+rN4PkSzwzcRdmMDAGaevNHMtdSELMCl6ZHiszFQTz1rxTJEPkJgCA5lkDWAY5ZP0IPmtfL4GzRoppH9rMdNm6LZ9MwCcIynT9iEeKqwNs="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "931997be4-67a7-43c1-93d8-51b3e309801a7", "record_id": "flaws_cloudtrail:0000556:931997be4-67a7-43c1-93d8-51b3e309801a7", "row_index": 556, "timestamp": "2019-06-14T03:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1896, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "931997be4-67a7-43c1-93d8-51b3e309801a7", "eventTime": "2019-06-14T03:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7OXOTQEXJDMH8XE8", "expiration": "Jun 14, 2019 9:50:06 AM", "sessionToken": "AgoJb3JpZ2luX2VjELz//////////wEaCXVzLXdlc3QtMiJHMEUCIDxQaKpwudPbUTQBHvLfQt6NkQGmFtkHSPsuFwVPRV+vAiEAvCk1fIHABa0iOD0obwXwFEaF5WBvo9w1XnW52/Hfh4wq4wMI5f//////////ARAAGgw5NzU0MjYyNjIwMjkiDAAu01lw3Safu8FbSiq3A42yNZOU0miW9bSTXIzA3GZ0XTZSyfNJwLjlV4dp1xoNt9FgxjSpf2pXEqQsWmy9LYGw29hAvsQYsHdM8/h/MJmPEXPhH5bsXQaW27tNzqJeuuhlzLIekpwI2Ulms/lUUyjb3wP/wDHOk+B3eZpYfM4lF8uF/Al9kQfGJqlBwR58xRF/+hnmYwnfBTDzjH24GA9ak77Ldwoiy3brTMub3dWt6+YjDDc1Yt0ReYlm71ZLSBCYszS7TCCSvo/uUctjHo7CQ4FgEZTXsCqpJhYK9Z0YF2R5FDy6nBMzNAsI0dKtIuV2VzsgYnBLksQlvwhsA1KIPEp29UBUBDs+E96WEGPuueYZ1FuNc4cVQyz3drVdaMAEmP+ZJP/ykm7+uKvMRvE79OHq1TPcJb+63x2Qt2P7NgHDn6YyC4TUHbIeOHvjD/0OMosCBaS0EGIQEGw81LCclKyNGPNR1As60o5UwnGG3IDvw8PjvcUxzk4Ejs5warlxDsDzLuCD3DJi1X8C12RDggye9u4vT0TRt6zZEfh83LwdTTAYScTP8vd8+H7CMAh25lh986uIKBB439H1FXu6OTCFrxAw9KeM6AU6tAHxBbSFYFIi5nLBYEejs2/v38wJ3MM3wfLRz2sEsu2gY/5WWnc7mqyAw5PJ1h6C0ulAdVLuHlfnyYFjkcgGo3IpAntscX4LW8FZ7b6qBLBiUKgyMyYSP/iFr8FBjpRn8KZqlbFFI+rN4PkSzwzcRdmMDAGaevNHMtdSELMCl6ZHiszFQTz1rxTJEPkJgCA5lkDWAY5ZP0IPmtfL4GzRoppH9rMdNm6LZ9MwCcIynT9iEeKqwNs="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da442b07-5841-4b84-a11c-c2e2bc411237", "record_id": "flaws_cloudtrail:0000557:da442b07-5841-4b84-a11c-c2e2bc411237", "row_index": 557, "timestamp": "2019-06-14T04:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da442b07-5841-4b84-a11c-c2e2bc411237", "eventTime": "2019-06-14T04:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABC2GGW96KS5Q00N8", "expiration": "Jun 14, 2019 11:02:15 AM", "sessionToken": "AgoJb3JpZ2luX2VjEL3//////////wEaCXVzLXdlc3QtMiJIMEYCIQD4MmqyHKJrOEpz4XMcsUfaWSNblmJwV4CJsbZ74/RYNQIhAJ3jaHu2PFzAXtWbO1tIzISWazKefnFhtfrq2PJGEQnuKuMDCOb//////////wEQABoMOTc1NDI2MjYyMDI5IgxmIMtVMfSLdC9YhVYqtwMe/lXVPjkbmxiBdzSV/cjwffGtaGpxMN7xOvgXdzk/Y/YhWxL7ZIHxWDgzI69P+4pBFo5/YsiQMXxRLe15dfYhI1LdW4V+y67pxsCh4N37U3FKmRMamSCBhairKbVbILJqUUqPmWGzRA1w0ntFy046p8qs/cltkMHwSgnI2Gy5LR4M1gL7y2icow83x7ZCIjmiVqAubfXBO20S4tAXj9MKugABhHq4rwv1t3zyWTJbanR+PQcJCwbfX0qS0hQ8OKp1occvUgdxX+pwLySSnMY4FIEaLkkNFwz6CtTgdf9Wx/nsW2A8pDhws9/k57g1htNc2zenFHc4q4l1p8JGs7MwmJte7qXJipgw4kBRjC76ijc5YcxeX8T6YuSKNvBXNSTwMJwKal25iPGCIx42Pb0GA1hwdTyE7qwkdapB9aoI9mLn7B0M9F6sqUbBq3qe7q1MtQ6cgS3XwIKFzoWful5rPRUYRB790SFVUMf9ePOYVrR1uBmbQE2rzWLr5b+vK5zFEArhHI0biccsuku+ac9VHrgm+hfZihlJg5gvt6BwINEdgbc1QsyyADATx33UGAA8SP88dFQMMIXEjOgFOrMBCCs3wnqnH4c23GwMAW5rZc4NhPAWkWPHLpxUzTZTQUAyxWfILblATWzCVhQFPOBKX3+bU0EVMQpdQyU1IiESQzPi9w6pBcHrgadrAqEuVA8TG29J1ydj0pYjMqDJDIGmsFP4BK7bLCOmz7RKteC8X4eqo/hNFWEIVltTh/DetjPKnlsAz0DHhnBTMlEMLRD/+6MOXktuSsWVYK0XIeE8ZDmlUyKQMfX525pAr9utKuwHK5w="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da442b07-5841-4b84-a11c-c2e2bc411237", "record_id": "flaws_cloudtrail:0000558:da442b07-5841-4b84-a11c-c2e2bc411237", "row_index": 558, "timestamp": "2019-06-14T04:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da442b07-5841-4b84-a11c-c2e2bc411237", "eventTime": "2019-06-14T04:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABC2GGW96KS5Q00N8", "expiration": "Jun 14, 2019 11:02:15 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a6940c-aa9d-4c4d-ab23-45b5bc70118", "record_id": "flaws_cloudtrail:0000559:a1a6940c-aa9d-4c4d-ab23-45b5bc70118", "row_index": 559, "timestamp": "2019-06-14T05:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a6940c-aa9d-4c4d-ab23-45b5bc70118", "eventTime": "2019-06-14T05:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA80TEFHOS58F74DXU", "expiration": "Jun 14, 2019 11:42:25 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a6940c-aa9d-4c4d-ab23-45b5bc70118", "record_id": "flaws_cloudtrail:0000560:a1a6940c-aa9d-4c4d-ab23-45b5bc70118", "row_index": 560, "timestamp": "2019-06-14T05:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a6940c-aa9d-4c4d-ab23-45b5bc70118", "eventTime": "2019-06-14T05:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA80TEFHOS58F74DXU", "expiration": "Jun 14, 2019 11:42:25 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77abe095-8493-4165-a339-3a1b49ba9374", "record_id": "flaws_cloudtrail:0000561:77abe095-8493-4165-a339-3a1b49ba9374", "row_index": 561, "timestamp": "2019-06-14T06:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77abe095-8493-4165-a339-3a1b49ba9374", "eventTime": "2019-06-14T06:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATB42445JXE2P0PTX", "expiration": "Jun 14, 2019 12:36:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77abe095-8493-4165-a339-3a1b49ba9374", "record_id": "flaws_cloudtrail:0000562:77abe095-8493-4165-a339-3a1b49ba9374", "row_index": 562, "timestamp": "2019-06-14T06:26:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77abe095-8493-4165-a339-3a1b49ba9374", "eventTime": "2019-06-14T06:26:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATB42445JXE2P0PTX", "expiration": "Jun 14, 2019 12:36:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2f0177-ab83-4ed5-bae8-63ee364b403b", "record_id": "flaws_cloudtrail:0000563:bd2f0177-ab83-4ed5-bae8-63ee364b403b", "row_index": 563, "timestamp": "2019-06-14T06:28:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2f0177-ab83-4ed5-bae8-63ee364b403b", "eventTime": "2019-06-14T06:28:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIALM1LJS79XOUL1KNR", "expiration": "Jun 14, 2019 7:28:05 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2f0177-ab83-4ed5-bae8-63ee364b403b", "record_id": "flaws_cloudtrail:0000564:bd2f0177-ab83-4ed5-bae8-63ee364b403b", "row_index": 564, "timestamp": "2019-06-14T06:28:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2f0177-ab83-4ed5-bae8-63ee364b403b", "eventTime": "2019-06-14T06:28:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIALM1LJS79XOUL1KNR", "expiration": "Jun 14, 2019 7:28:05 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d06d712-ebf2-4ab6-914e-41e3e3038511", "record_id": "flaws_cloudtrail:0000565:2d06d712-ebf2-4ab6-914e-41e3e3038511", "row_index": 565, "timestamp": "2019-06-14T07:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d06d712-ebf2-4ab6-914e-41e3e3038511", "eventTime": "2019-06-14T07:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQTG48E2D1CFYV262", "expiration": "Jun 14, 2019 1:55:23 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d06d712-ebf2-4ab6-914e-41e3e3038511", "record_id": "flaws_cloudtrail:0000566:2d06d712-ebf2-4ab6-914e-41e3e3038511", "row_index": 566, "timestamp": "2019-06-14T07:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d06d712-ebf2-4ab6-914e-41e3e3038511", "eventTime": "2019-06-14T07:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQTG48E2D1CFYV262", "expiration": "Jun 14, 2019 1:55:23 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe4921d-bb83-4522-98fc-7efc2acc47b9", "record_id": "flaws_cloudtrail:0000567:3fe4921d-bb83-4522-98fc-7efc2acc47b9", "row_index": 567, "timestamp": "2019-06-14T08:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe4921d-bb83-4522-98fc-7efc2acc47b9", "eventTime": "2019-06-14T08:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGHVXVVQOOWGR2HML", "expiration": "Jun 14, 2019 2:51:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe4921d-bb83-4522-98fc-7efc2acc47b9", "record_id": "flaws_cloudtrail:0000568:3fe4921d-bb83-4522-98fc-7efc2acc47b9", "row_index": 568, "timestamp": "2019-06-14T08:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe4921d-bb83-4522-98fc-7efc2acc47b9", "eventTime": "2019-06-14T08:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGHVXVVQOOWGR2HML", "expiration": "Jun 14, 2019 2:51:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38381c2-cafc-47f5-ab9f-4d16f0e19d45", "record_id": "flaws_cloudtrail:0000569:38381c2-cafc-47f5-ab9f-4d16f0e19d45", "row_index": 569, "timestamp": "2019-06-14T08:57:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38381c2-cafc-47f5-ab9f-4d16f0e19d45", "eventTime": "2019-06-14T08:57:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38381c2-cafc-47f5-ab9f-4d16f0e19d45", "record_id": "flaws_cloudtrail:0000570:38381c2-cafc-47f5-ab9f-4d16f0e19d45", "row_index": 570, "timestamp": "2019-06-14T08:57:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "[aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38381c2-cafc-47f5-ab9f-4d16f0e19d45", "eventTime": "2019-06-14T08:57:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "[aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0608cf3b-2b32-43ae-ac62-ae2a48f4dc69", "record_id": "flaws_cloudtrail:0000571:0608cf3b-2b32-43ae-ac62-ae2a48f4dc69", "row_index": 571, "timestamp": "2019-06-14T08:58:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0608cf3b-2b32-43ae-ac62-ae2a48f4dc69", "eventTime": "2019-06-14T08:58:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0608cf3b-2b32-43ae-ac62-ae2a48f4dc69", "record_id": "flaws_cloudtrail:0000572:0608cf3b-2b32-43ae-ac62-ae2a48f4dc69", "row_index": 572, "timestamp": "2019-06-14T08:58:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0608cf3b-2b32-43ae-ac62-ae2a48f4dc69", "eventTime": "2019-06-14T08:58:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49373-e465-4000-bd3f-3895bb200ec2", "record_id": "flaws_cloudtrail:0000573:49373-e465-4000-bd3f-3895bb200ec2", "row_index": 573, "timestamp": "2019-06-14T09:01:28Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49373-e465-4000-bd3f-3895bb200ec2", "eventTime": "2019-06-14T09:01:28Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49373-e465-4000-bd3f-3895bb200ec2", "record_id": "flaws_cloudtrail:0000574:49373-e465-4000-bd3f-3895bb200ec2", "row_index": 574, "timestamp": "2019-06-14T09:01:28Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49373-e465-4000-bd3f-3895bb200ec2", "eventTime": "2019-06-14T09:01:28Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5d3774-8d9e-4105-9885-b1c26e5de880", "record_id": "flaws_cloudtrail:0000575:ff5d3774-8d9e-4105-9885-b1c26e5de880", "row_index": 575, "timestamp": "2019-06-14T09:01:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5d3774-8d9e-4105-9885-b1c26e5de880", "eventTime": "2019-06-14T09:01:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5d3774-8d9e-4105-9885-b1c26e5de880", "record_id": "flaws_cloudtrail:0000576:ff5d3774-8d9e-4105-9885-b1c26e5de880", "row_index": 576, "timestamp": "2019-06-14T09:01:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5d3774-8d9e-4105-9885-b1c26e5de880", "eventTime": "2019-06-14T09:01:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "[aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3-us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64bd24f9-7af3-4a08-b037-f324f6ec55ba", "record_id": "flaws_cloudtrail:0000577:64bd24f9-7af3-4a08-b037-f324f6ec55ba", "row_index": 577, "timestamp": "2019-06-14T09:26:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64bd24f9-7af3-4a08-b037-f324f6ec55ba", "eventTime": "2019-06-14T09:26:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64bd24f9-7af3-4a08-b037-f324f6ec55ba", "record_id": "flaws_cloudtrail:0000578:64bd24f9-7af3-4a08-b037-f324f6ec55ba", "row_index": 578, "timestamp": "2019-06-14T09:26:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64bd24f9-7af3-4a08-b037-f324f6ec55ba", "eventTime": "2019-06-14T09:26:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dda0a3-a218-47f8-bffe-41d594bcab88", "record_id": "flaws_cloudtrail:0000579:c7dda0a3-a218-47f8-bffe-41d594bcab88", "row_index": 579, "timestamp": "2019-06-14T09:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dda0a3-a218-47f8-bffe-41d594bcab88", "eventTime": "2019-06-14T09:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFHTMS43SWD1MCHM1", "expiration": "Jun 14, 2019 3:54:29 PM", "sessionToken": "AgoJb3JpZ2luX2VjEML//////////wEaCXVzLXdlc3QtMiJGMEQCIANfwyVixSLfC5sYt+t+7LzqSrVT0+gR+glidX20QHJ+AiA8NONRKc+rJnI3p4mIZtuRsMn87Ae9OMSahF2avkMH8CrjAwjr//////////8BEAAaDDk3NTQyNjI2MjAyOSIM5PCls+79x0LxmJEyKrcDSEo5/VKz4D6h7eChJfJdy1rVibzGB5XrVMbj0tM3icKpvHjvjUn4BXpwk7EmDTei8kskI4IiIsztIlIUYTFJAmjIbu+LDY4yPCTkI3NT6xSE47LwETpnplQphbdUWMdhNgg/s/DULOGmK7YEyTcTB7S218wcwevSWZDyy+XSU8YwZ63+M6hr0cP5I3UXI0CgzPvtxz8UKgSEyHHlztNyYj0Jeo4+VaaHfG8ujmD5bLITgGHjoPrSX/u747Y8NjjNzistmUk6rC29ZtkT0pd1ASKCpm+2MO3yQoUCO+TDbsz3Lz5o/rJjcAoWUiACirqfFRxmONdH+Y3FlnGPVeTZPz9yw5H5P0Q0/CHYA/3LkeeEjpid34UKneG2v61sWhVUNtmec42iuSBx36NNqK1Mw1UEd2cQfjEvOQLx1lbA7HIokY/Ps4xy6OOmDm258Q8xgbiPkE/e8fKvJqQBPF9K/we4il+OZH5wHY7s7Tp37hSggQ7pE2lU8ar2ntq2gXohe+ZVjPLBK7/e8uVcydTpFv52DA0heqppV65vRnigtFUpEvJKX+xcd3LOfauZ3CUVDfnJvhHloDDV0I3oBTq1ARtWcE6OCAoQ34Bqk29o0yNWCnC114E1vEtW6hubMYW5gQRrJsvSGErP4DoHzRHWNwzopXxIK9Pwn1D+jJipgpBqY8s00I2I1xs0uhvByQcACrSvLCU7JnuWjU7YD8FLgoEGV/Jm9jKGngtH8xZQSXh0UKzHEIHA1trOQjCSV1jiaC8ziahKn4jnMkgKYf24BD8kbHaHHdCOkg0MjQaZ2RjqLW72U7H9lcDOW1Fs2g8KcEzez28="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dda0a3-a218-47f8-bffe-41d594bcab88", "record_id": "flaws_cloudtrail:0000580:c7dda0a3-a218-47f8-bffe-41d594bcab88", "row_index": 580, "timestamp": "2019-06-14T09:26:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1895, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dda0a3-a218-47f8-bffe-41d594bcab88", "eventTime": "2019-06-14T09:26:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFHTMS43SWD1MCHM1", "expiration": "Jun 14, 2019 3:54:29 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adba05bc-fb12-4994-ac0d-3677bd642d98", "record_id": "flaws_cloudtrail:0000581:adba05bc-fb12-4994-ac0d-3677bd642d98", "row_index": 581, "timestamp": "2019-06-14T09:27:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adba05bc-fb12-4994-ac0d-3677bd642d98", "eventTime": "2019-06-14T09:27:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adba05bc-fb12-4994-ac0d-3677bd642d98", "record_id": "flaws_cloudtrail:0000582:adba05bc-fb12-4994-ac0d-3677bd642d98", "row_index": 582, "timestamp": "2019-06-14T09:27:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adba05bc-fb12-4994-ac0d-3677bd642d98", "eventTime": "2019-06-14T09:27:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715d3ace-ff24-4446-84ad-60b248765266", "record_id": "flaws_cloudtrail:0000583:715d3ace-ff24-4446-84ad-60b248765266", "row_index": 583, "timestamp": "2019-06-14T09:30:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715d3ace-ff24-4446-84ad-60b248765266", "eventTime": "2019-06-14T09:30:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715d3ace-ff24-4446-84ad-60b248765266", "record_id": "flaws_cloudtrail:0000584:715d3ace-ff24-4446-84ad-60b248765266", "row_index": 584, "timestamp": "2019-06-14T09:30:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715d3ace-ff24-4446-84ad-60b248765266", "eventTime": "2019-06-14T09:30:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eca30fe-e1e8-471e-af29-77cfffa6fb3b", "record_id": "flaws_cloudtrail:0000585:2eca30fe-e1e8-471e-af29-77cfffa6fb3b", "row_index": 585, "timestamp": "2019-06-14T09:33:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eca30fe-e1e8-471e-af29-77cfffa6fb3b", "eventTime": "2019-06-14T09:33:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eca30fe-e1e8-471e-af29-77cfffa6fb3b", "record_id": "flaws_cloudtrail:0000586:2eca30fe-e1e8-471e-af29-77cfffa6fb3b", "row_index": 586, "timestamp": "2019-06-14T09:33:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eca30fe-e1e8-471e-af29-77cfffa6fb3b", "eventTime": "2019-06-14T09:33:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62a0c6e0-afd8-490c-a023-203ecdb917b1", "record_id": "flaws_cloudtrail:0000587:62a0c6e0-afd8-490c-a023-203ecdb917b1", "row_index": 587, "timestamp": "2019-06-14T09:34:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62a0c6e0-afd8-490c-a023-203ecdb917b1", "eventTime": "2019-06-14T09:34:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62a0c6e0-afd8-490c-a023-203ecdb917b1", "record_id": "flaws_cloudtrail:0000588:62a0c6e0-afd8-490c-a023-203ecdb917b1", "row_index": 588, "timestamp": "2019-06-14T09:34:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62a0c6e0-afd8-490c-a023-203ecdb917b1", "eventTime": "2019-06-14T09:34:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2901d309-ebfe-4bfc-902b-7ecb5561e5ee", "record_id": "flaws_cloudtrail:0000589:2901d309-ebfe-4bfc-902b-7ecb5561e5ee", "row_index": 589, "timestamp": "2019-06-14T09:34:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2901d309-ebfe-4bfc-902b-7ecb5561e5ee", "eventTime": "2019-06-14T09:34:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2901d309-ebfe-4bfc-902b-7ecb5561e5ee", "record_id": "flaws_cloudtrail:0000590:2901d309-ebfe-4bfc-902b-7ecb5561e5ee", "row_index": 590, "timestamp": "2019-06-14T09:34:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2901d309-ebfe-4bfc-902b-7ecb5561e5ee", "eventTime": "2019-06-14T09:34:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70e6164e-34d8-4033-bd27-5961b4fe12c0", "record_id": "flaws_cloudtrail:0000591:70e6164e-34d8-4033-bd27-5961b4fe12c0", "row_index": 591, "timestamp": "2019-06-14T09:34:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70e6164e-34d8-4033-bd27-5961b4fe12c0", "eventTime": "2019-06-14T09:34:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70e6164e-34d8-4033-bd27-5961b4fe12c0", "record_id": "flaws_cloudtrail:0000592:70e6164e-34d8-4033-bd27-5961b4fe12c0", "row_index": 592, "timestamp": "2019-06-14T09:34:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70e6164e-34d8-4033-bd27-5961b4fe12c0", "eventTime": "2019-06-14T09:34:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342314c-cc3d-4514-b797-09b3e3dbec39", "record_id": "flaws_cloudtrail:0000593:342314c-cc3d-4514-b797-09b3e3dbec39", "row_index": 593, "timestamp": "2019-06-14T09:35:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342314c-cc3d-4514-b797-09b3e3dbec39", "eventTime": "2019-06-14T09:35:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342314c-cc3d-4514-b797-09b3e3dbec39", "record_id": "flaws_cloudtrail:0000594:342314c-cc3d-4514-b797-09b3e3dbec39", "row_index": 594, "timestamp": "2019-06-14T09:35:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342314c-cc3d-4514-b797-09b3e3dbec39", "eventTime": "2019-06-14T09:35:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df3253ed-2bfd-44d4-9359-70956c16bc32", "record_id": "flaws_cloudtrail:0000595:df3253ed-2bfd-44d4-9359-70956c16bc32", "row_index": 595, "timestamp": "2019-06-14T09:35:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df3253ed-2bfd-44d4-9359-70956c16bc32", "eventTime": "2019-06-14T09:35:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df3253ed-2bfd-44d4-9359-70956c16bc32", "record_id": "flaws_cloudtrail:0000596:df3253ed-2bfd-44d4-9359-70956c16bc32", "row_index": 596, "timestamp": "2019-06-14T09:35:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df3253ed-2bfd-44d4-9359-70956c16bc32", "eventTime": "2019-06-14T09:35:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02836-d4f5-49c0-91d9-aabcb50e278a", "record_id": "flaws_cloudtrail:0000597:02836-d4f5-49c0-91d9-aabcb50e278a", "row_index": 597, "timestamp": "2019-06-14T09:36:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02836-d4f5-49c0-91d9-aabcb50e278a", "eventTime": "2019-06-14T09:36:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02836-d4f5-49c0-91d9-aabcb50e278a", "record_id": "flaws_cloudtrail:0000598:02836-d4f5-49c0-91d9-aabcb50e278a", "row_index": 598, "timestamp": "2019-06-14T09:36:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.180.250.254", "user_agent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02836-d4f5-49c0-91d9-aabcb50e278a", "eventTime": "2019-06-14T09:36:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.180.250.254", "userAgent": "aws-cli/1.16.177 Python/3.7.3 Windows/10 botocore/1.12.167", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329ccab9-d7cc-400d-b5bd-1a4d1e46211a", "record_id": "flaws_cloudtrail:0000599:329ccab9-d7cc-400d-b5bd-1a4d1e46211a", "row_index": 599, "timestamp": "2019-06-14T09:38:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329ccab9-d7cc-400d-b5bd-1a4d1e46211a", "eventTime": "2019-06-14T09:38:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329ccab9-d7cc-400d-b5bd-1a4d1e46211a", "record_id": "flaws_cloudtrail:0000600:329ccab9-d7cc-400d-b5bd-1a4d1e46211a", "row_index": 600, "timestamp": "2019-06-14T09:38:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329ccab9-d7cc-400d-b5bd-1a4d1e46211a", "eventTime": "2019-06-14T09:38:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e5cdb3-3f9d-4aaa-a1cb-69710166f7dc", "record_id": "flaws_cloudtrail:0000601:39e5cdb3-3f9d-4aaa-a1cb-69710166f7dc", "row_index": 601, "timestamp": "2019-06-14T09:39:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e5cdb3-3f9d-4aaa-a1cb-69710166f7dc", "eventTime": "2019-06-14T09:39:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e5cdb3-3f9d-4aaa-a1cb-69710166f7dc", "record_id": "flaws_cloudtrail:0000602:39e5cdb3-3f9d-4aaa-a1cb-69710166f7dc", "row_index": 602, "timestamp": "2019-06-14T09:39:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e5cdb3-3f9d-4aaa-a1cb-69710166f7dc", "eventTime": "2019-06-14T09:39:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e150fb24-1f47-49f7-8fe2-939204c7d9749", "record_id": "flaws_cloudtrail:0000603:e150fb24-1f47-49f7-8fe2-939204c7d9749", "row_index": 603, "timestamp": "2019-06-14T09:39:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e150fb24-1f47-49f7-8fe2-939204c7d9749", "eventTime": "2019-06-14T09:39:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e150fb24-1f47-49f7-8fe2-939204c7d9749", "record_id": "flaws_cloudtrail:0000604:e150fb24-1f47-49f7-8fe2-939204c7d9749", "row_index": 604, "timestamp": "2019-06-14T09:39:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e150fb24-1f47-49f7-8fe2-939204c7d9749", "eventTime": "2019-06-14T09:39:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eadaa5b-c489-4a12-9214-9d8e33f120773", "record_id": "flaws_cloudtrail:0000605:6eadaa5b-c489-4a12-9214-9d8e33f120773", "row_index": 605, "timestamp": "2019-06-14T09:42:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eadaa5b-c489-4a12-9214-9d8e33f120773", "eventTime": "2019-06-14T09:42:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eadaa5b-c489-4a12-9214-9d8e33f120773", "record_id": "flaws_cloudtrail:0000606:6eadaa5b-c489-4a12-9214-9d8e33f120773", "row_index": 606, "timestamp": "2019-06-14T09:42:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eadaa5b-c489-4a12-9214-9d8e33f120773", "eventTime": "2019-06-14T09:42:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d5722f-9378-4590-a490-d8cde07e27e9", "record_id": "flaws_cloudtrail:0000607:57d5722f-9378-4590-a490-d8cde07e27e9", "row_index": 607, "timestamp": "2019-06-14T09:42:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d5722f-9378-4590-a490-d8cde07e27e9", "eventTime": "2019-06-14T09:42:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxdXErQ3ZSSlkrK21tVGpBMWNBM2tlMjllZkQwYnRSb3hpdTB0elpwczRiNmpmOHRuak52ZlprMG9NL0JFN3owWEd3bStvdmQxTlVLa01rbUlFWEdJYmVQSWVIekt2ak8yMmRpNHg4N2lUNFhSZ29xT0tlMU81Uk8rNUxFTFRQSTZwMGtKUHJDK041LzhZN3Z1WDVyanNJODA4SllobllHRzhFZXFRQ3JsclNJN25YWmNUWFN1cS85WTFRaUY3UHhUeUVRczVxeDBQNXhCZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d5722f-9378-4590-a490-d8cde07e27e9", "record_id": "flaws_cloudtrail:0000608:57d5722f-9378-4590-a490-d8cde07e27e9", "row_index": 608, "timestamp": "2019-06-14T09:42:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d5722f-9378-4590-a490-d8cde07e27e9", "eventTime": "2019-06-14T09:42:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxdXErQ3ZSSlkrK21tVGpBMWNBM2tlMjllZkQwYnRSb3hpdTB0elpwczRiNmpmOHRuak52ZlprMG9NL0JFN3owWEd3bStvdmQxTlVLa01rbUlFWEdJYmVQSWVIekt2ak8yMmRpNHg4N2lUNFhSZ29xT0tlMU81Uk8rNUxFTFRQSTZwMGtKUHJDK041LzhZN3Z1WDVyanNJODA4SllobllHRzhFZXFRQ3JsclNJN25YWmNUWFN1cS85WTFRaUY3UHhUeUVRczVxeDBQNXhCZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cc7f81c-6de0-44c2-9472-40bbbcf54964", "record_id": "flaws_cloudtrail:0000609:0cc7f81c-6de0-44c2-9472-40bbbcf54964", "row_index": 609, "timestamp": "2019-06-14T09:42:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cc7f81c-6de0-44c2-9472-40bbbcf54964", "eventTime": "2019-06-14T09:42:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQVXBRNnBMTDFLaE5tUTI1ZGdHaGNnOHRmK0paUWZoK0g4ZmxtV1NUcUI0OXhiU0ErblVISTAzeTlWRldMUlcxWDVEUXhnSVZkZDFiMjdIUGNoL3hiK1FNNE5lL3c1TVNDTXZLYzAyMTVFT1E4SytiU0NOc1VNRmFlMDZ2VEwrU1dRejA0cGxUNUVQTXVWYnBPYlZ1NmpuQnVibW1Pd0xmL3pKTi9kS1hkeGhDOGRGVzZ4VytuZkl2aGlRSy9GSmlhOGsweXVJNmZWeTVKZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cc7f81c-6de0-44c2-9472-40bbbcf54964", "record_id": "flaws_cloudtrail:0000610:0cc7f81c-6de0-44c2-9472-40bbbcf54964", "row_index": 610, "timestamp": "2019-06-14T09:42:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cc7f81c-6de0-44c2-9472-40bbbcf54964", "eventTime": "2019-06-14T09:42:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQVXBRNnBMTDFLaE5tUTI1ZGdHaGNnOHRmK0paUWZoK0g4ZmxtV1NUcUI0OXhiU0ErblVISTAzeTlWRldMUlcxWDVEUXhnSVZkZDFiMjdIUGNoL3hiK1FNNE5lL3c1TVNDTXZLYzAyMTVFT1E4SytiU0NOc1VNRmFlMDZ2VEwrU1dRejA0cGxUNUVQTXVWYnBPYlZ1NmpuQnVibW1Pd0xmL3pKTi9kS1hkeGhDOGRGVzZ4VytuZkl2aGlRSy9GSmlhOGsweXVJNmZWeTVKZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f526c8f-d488-467d-b694-d0223a74fff1", "record_id": "flaws_cloudtrail:0000611:2f526c8f-d488-467d-b694-d0223a74fff1", "row_index": 611, "timestamp": "2019-06-14T09:42:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.210.167.8", "user_agent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f526c8f-d488-467d-b694-d0223a74fff1", "eventTime": "2019-06-14T09:42:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.210.167.8", "userAgent": "aws-cli/1.11.36 Python/2.7.15rc1 Linux/4.15.0-47-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5K0xXTnR5VCtIL2c2ZzhRYU9hWjUyNE92Nmx2N0NaM2RhRmRPZzk4S0x4aTZ2OTd0anByN2cwQjJRNHRYVlN0MmpESmI2TDRiZU90Q20zQ1dwdm10Tk1CaUIzUUpvYVpML3g4cTlYVEFNM1RUQWhLaGlMaDBpdHNQellYZEF6Y0k2YmhKZTRPbGtEZ3YzOTB0SU5oTlBTYlFLODFjbVJkSGR4blQzd1ZZeFhpNXUwcHVjb1RtNllWYlpxa2pnK3pHY0drdWU2QzFlVWdoQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}