Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2bec02b-89c3-4129-8b35-9917df93a436", "record_id": "flaws_cloudtrail:0000000:d2bec02b-89c3-4129-8b35-9917df93a436", "row_index": 0, "timestamp": "2018-04-17T11:50:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2bec02b-89c3-4129-8b35-9917df93a436", "eventTime": "2018-04-17T11:50:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2bd1a2e-7b46-4c51-b73f-cc8ceb9b49b1", "record_id": "flaws_cloudtrail:0000001:b2bd1a2e-7b46-4c51-b73f-cc8ceb9b49b1", "row_index": 1, "timestamp": "2018-04-17T11:50:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2bd1a2e-7b46-4c51-b73f-cc8ceb9b49b1", "eventTime": "2018-04-17T11:50:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c02951d-2d8b-4e42-b24f-344126114308", "record_id": "flaws_cloudtrail:0000002:6c02951d-2d8b-4e42-b24f-344126114308", "row_index": 2, "timestamp": "2018-04-17T11:50:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c02951d-2d8b-4e42-b24f-344126114308", "eventTime": "2018-04-17T11:50:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9cc9602-9cda-4910-86c9-8f388780e2930", "record_id": "flaws_cloudtrail:0000003:f9cc9602-9cda-4910-86c9-8f388780e2930", "row_index": 3, "timestamp": "2018-04-17T11:50:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9cc9602-9cda-4910-86c9-8f388780e2930", "eventTime": "2018-04-17T11:50:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3851ac78-a3de-4681-b782-e76e138016f08", "record_id": "flaws_cloudtrail:0000004:3851ac78-a3de-4681-b782-e76e138016f08", "row_index": 4, "timestamp": "2018-04-17T11:50:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3851ac78-a3de-4681-b782-e76e138016f08", "eventTime": "2018-04-17T11:50:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b0eeef2-5743-4382-a79b-e52dcbee52c2", "record_id": "flaws_cloudtrail:0000005:4b0eeef2-5743-4382-a79b-e52dcbee52c2", "row_index": 5, "timestamp": "2018-04-17T11:50:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b0eeef2-5743-4382-a79b-e52dcbee52c2", "eventTime": "2018-04-17T11:50:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ecafbdb-5eb3-42ce-bdfd-760ba846f1a0", "record_id": "flaws_cloudtrail:0000006:3ecafbdb-5eb3-42ce-bdfd-760ba846f1a0", "row_index": 6, "timestamp": "2018-04-17T11:50:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ecafbdb-5eb3-42ce-bdfd-760ba846f1a0", "eventTime": "2018-04-17T11:50:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0996b189-852d-4e7d-ae56-ef5ddd53f01c", "record_id": "flaws_cloudtrail:0000007:0996b189-852d-4e7d-ae56-ef5ddd53f01c", "row_index": 7, "timestamp": "2018-04-17T11:50:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0996b189-852d-4e7d-ae56-ef5ddd53f01c", "eventTime": "2018-04-17T11:50:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fccab39-2693-4226-864d-ef1b9740fdb2", "record_id": "flaws_cloudtrail:0000008:9fccab39-2693-4226-864d-ef1b9740fdb2", "row_index": 8, "timestamp": "2018-04-17T11:50:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fccab39-2693-4226-864d-ef1b9740fdb2", "eventTime": "2018-04-17T11:50:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad699e40-25c0-4d54-9d19-932c005a78ec", "record_id": "flaws_cloudtrail:0000009:ad699e40-25c0-4d54-9d19-932c005a78ec", "row_index": 9, "timestamp": "2018-04-17T11:50:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad699e40-25c0-4d54-9d19-932c005a78ec", "eventTime": "2018-04-17T11:50:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140f1934-27df-48fe-bcbf-53f312270db7", "record_id": "flaws_cloudtrail:0000010:140f1934-27df-48fe-bcbf-53f312270db7", "row_index": 10, "timestamp": "2018-04-17T11:50:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140f1934-27df-48fe-bcbf-53f312270db7", "eventTime": "2018-04-17T11:50:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e22017-26a6-4d08-b29f-cc0f6f7d4cb6", "record_id": "flaws_cloudtrail:0000011:3e22017-26a6-4d08-b29f-cc0f6f7d4cb6", "row_index": 11, "timestamp": "2018-04-17T11:50:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e22017-26a6-4d08-b29f-cc0f6f7d4cb6", "eventTime": "2018-04-17T11:50:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74b6bc25-c8e2-40a8-9c26-b0a121b575e5", "record_id": "flaws_cloudtrail:0000012:74b6bc25-c8e2-40a8-9c26-b0a121b575e5", "row_index": 12, "timestamp": "2018-04-17T11:50:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74b6bc25-c8e2-40a8-9c26-b0a121b575e5", "eventTime": "2018-04-17T11:50:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7052db86-d037-440b-a673-0f91b56750e2", "record_id": "flaws_cloudtrail:0000013:7052db86-d037-440b-a673-0f91b56750e2", "row_index": 13, "timestamp": "2018-04-17T11:50:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7052db86-d037-440b-a673-0f91b56750e2", "eventTime": "2018-04-17T11:50:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb9671ae-bf26-45ab-a6ac-9f318893902e", "record_id": "flaws_cloudtrail:0000014:bb9671ae-bf26-45ab-a6ac-9f318893902e", "row_index": 14, "timestamp": "2018-04-17T11:50:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb9671ae-bf26-45ab-a6ac-9f318893902e", "eventTime": "2018-04-17T11:50:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a4e61fb-17cc-47ff-ac16-23fe5ad5528e", "record_id": "flaws_cloudtrail:0000015:7a4e61fb-17cc-47ff-ac16-23fe5ad5528e", "row_index": 15, "timestamp": "2018-04-17T11:50:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a4e61fb-17cc-47ff-ac16-23fe5ad5528e", "eventTime": "2018-04-17T11:50:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "707c0c7f-550e-416d-9db1-4322a0e746e9", "record_id": "flaws_cloudtrail:0000016:707c0c7f-550e-416d-9db1-4322a0e746e9", "row_index": 16, "timestamp": "2018-04-17T11:50:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "707c0c7f-550e-416d-9db1-4322a0e746e9", "eventTime": "2018-04-17T11:50:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "781cb4f2-b367-4e6e-8cc4-ad290d99673", "record_id": "flaws_cloudtrail:0000017:781cb4f2-b367-4e6e-8cc4-ad290d99673", "row_index": 17, "timestamp": "2018-04-17T11:50:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "781cb4f2-b367-4e6e-8cc4-ad290d99673", "eventTime": "2018-04-17T11:50:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681b6bbf-a95e-4886-917e-ed34bcfe7506", "record_id": "flaws_cloudtrail:0000018:681b6bbf-a95e-4886-917e-ed34bcfe7506", "row_index": 18, "timestamp": "2018-04-17T11:50:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681b6bbf-a95e-4886-917e-ed34bcfe7506", "eventTime": "2018-04-17T11:50:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OTI269U9BVYN-KfAcm2lulch8VeMQYtNwMt8Y3LqhGtbZ3Laa0gDoDk9QtFddFbDq4Su9lzNiLdKK49nZ5P3ze-MgigqVS8OMttf49coSXc7wmjJ4uxX-R3yQGotmkBS6h7oohQDz9EckssRd-Jw9mMUK1heuePkOFXHk6gsPiCl_ZX1YJzqQJsQtcTbZScX_kyI7uXD20XR0k1Enfneovh8gqppam7XJ2P9tlIJpH-QGVh4sCtziBwPaFqxQH-ADDPp8szExrXP6ThwpDnqLz4kOLa_EEdo2R8nNTDxs3Np-V83s2PK8P0u_h6xwMXsDfa5HUyj6_ZDXCySoDy-cVpYeWbWX4xZ1syRlHDeY0AEB0N5yXl_c7uuxLWAt7H21i9hNs-SpYX9lQXMEZsH3-WW3OdzBBT8hT7DS__c60stdVPCGHgUma32IEI61cJFXFOPYQ_UWzZWJZ6rXxeEct0fH4CGyncTtWcsWLiX_HI_DNOJ2j-65FjgXWY7aPn0U9THSw6fyYlHX1Bqr734_-AAGWYdw4ESkrczjBlpLODo39I-AaYkP6q8hyvFQfRh_P6EFrlQVcdffJMVKFCLAaUZ5VQh1O9sUPGK3kJynf2XILWev_BlThHvsRDdY7kzT4SZCDtYt6cTS1A35gk4EAQ9i-1ArH0xJD6JkJA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea5bb99-4154-454d-85e9-037d29cb651f", "record_id": "flaws_cloudtrail:0000019:4ea5bb99-4154-454d-85e9-037d29cb651f", "row_index": 19, "timestamp": "2018-04-17T11:50:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea5bb99-4154-454d-85e9-037d29cb651f", "eventTime": "2018-04-17T11:50:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ccdfc7d-3cdb-448e-a6ce-db215a63618a", "record_id": "flaws_cloudtrail:0000020:3ccdfc7d-3cdb-448e-a6ce-db215a63618a", "row_index": 20, "timestamp": "2018-04-17T11:50:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ccdfc7d-3cdb-448e-a6ce-db215a63618a", "eventTime": "2018-04-17T11:50:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0ec47f0-470e-48e3-a9de-30192b428b96", "record_id": "flaws_cloudtrail:0000021:e0ec47f0-470e-48e3-a9de-30192b428b96", "row_index": 21, "timestamp": "2018-04-17T11:50:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0ec47f0-470e-48e3-a9de-30192b428b96", "eventTime": "2018-04-17T11:50:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67d3527f-f2de-4f95-8d4f-e0a5aa41a287", "record_id": "flaws_cloudtrail:0000022:67d3527f-f2de-4f95-8d4f-e0a5aa41a287", "row_index": 22, "timestamp": "2018-04-17T11:50:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67d3527f-f2de-4f95-8d4f-e0a5aa41a287", "eventTime": "2018-04-17T11:50:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896642a11-ca48-4d74-ab9c-1a6502babd90", "record_id": "flaws_cloudtrail:0000023:896642a11-ca48-4d74-ab9c-1a6502babd90", "row_index": 23, "timestamp": "2018-04-17T11:50:53Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896642a11-ca48-4d74-ab9c-1a6502babd90", "eventTime": "2018-04-17T11:50:53Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "139c8ae0-29ba-4d8b-aec4-fb5f658a6219", "record_id": "flaws_cloudtrail:0000024:139c8ae0-29ba-4d8b-aec4-fb5f658a6219", "row_index": 24, "timestamp": "2018-04-17T11:50:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "139c8ae0-29ba-4d8b-aec4-fb5f658a6219", "eventTime": "2018-04-17T11:50:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: pNUk4MTldVdcrxpWkuOad8NXdw_j0jwGRf4qEK3WXw1brBk8QQfpGh-I-urchPGhHFCI3RONVuU-hi4YYMgr6JoHxD7ZJ4k2SZy9ycCDoj47U0kyI7yAoeLDkG2W56BZWEK5PVo3Jeyl-IDfW4YSZFU1q5oO_K7hjsfgojvMpdOQnTslU8CouhY1Z94-CIp18yh6hMrKknNZlBIKA9qTn3ud2kXLhHRYYrdeRoL8g5W_JkkrDyqcwu_yOo6zSJXTJIs8khsIEe63gdEh2saWNjetBrQYIklLgz9bQQAZKjTb-3H9O9Ycp8nZlq1c7TjBe3r4OM8leLdDRnPQehkYRJGjZYagPeB-QdvXyWe7fxjTFeVtpPCVyiRfZMvXYEjB7d91d-9MIpdwh9i83hyfmXxfqqi-lUaO15WAopOheGCUL-tnH1NlNvnD0SqP4S_Vp6QbO1svZ-ScbwuAa4gKXG6sqg_kw85qlOsF_RVW2JofGf41w-5WG52a4Zu4uEy7KJ9AJwPB1vYlpv7x2EhcbwJV0woMaMYcmAHjnKEwmJ28AhyEsZy3u-4mtt1EgCxr_sYD1JqCd7Uowb-6Nv2idQQPCD6ElWJJBrNvnXth5qeeXB04n7qpINAxhzs6Ni1IMv32MYb0KzX1JO36izWXqIcvZBLeUC8tbhYJuf8i", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a47195e-22d0-4fdc-aabe-206ef0f7e770", "record_id": "flaws_cloudtrail:0000025:6a47195e-22d0-4fdc-aabe-206ef0f7e770", "row_index": 25, "timestamp": "2018-04-17T11:50:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1335, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a47195e-22d0-4fdc-aabe-206ef0f7e770", "eventTime": "2018-04-17T11:50:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99f9ee1d-ac15-44c2-a177-36c84033dc30", "record_id": "flaws_cloudtrail:0000026:99f9ee1d-ac15-44c2-a177-36c84033dc30", "row_index": 26, "timestamp": "2018-04-17T11:50:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99f9ee1d-ac15-44c2-a177-36c84033dc30", "eventTime": "2018-04-17T11:50:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f691da3-1084-4eb2-ae25-c0cfb1842e46", "record_id": "flaws_cloudtrail:0000027:2f691da3-1084-4eb2-ae25-c0cfb1842e46", "row_index": 27, "timestamp": "2018-04-17T11:50:56Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f691da3-1084-4eb2-ae25-c0cfb1842e46", "eventTime": "2018-04-17T11:50:56Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93040e-8081-4b42-b433-90ab213065f82", "record_id": "flaws_cloudtrail:0000028:93040e-8081-4b42-b433-90ab213065f82", "row_index": 28, "timestamp": "2018-04-17T11:50:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1333, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93040e-8081-4b42-b433-90ab213065f82", "eventTime": "2018-04-17T11:50:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00abe8aa-38b3-4f28-a7e6-5344b76fcc48", "record_id": "flaws_cloudtrail:0000029:00abe8aa-38b3-4f28-a7e6-5344b76fcc48", "row_index": 29, "timestamp": "2018-04-17T11:50:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00abe8aa-38b3-4f28-a7e6-5344b76fcc48", "eventTime": "2018-04-17T11:50:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8740b15-a26f-45cc-a8d9-a1c8bd8d31f5", "record_id": "flaws_cloudtrail:0000030:b8740b15-a26f-45cc-a8d9-a1c8bd8d31f5", "row_index": 30, "timestamp": "2018-04-17T11:50:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8740b15-a26f-45cc-a8d9-a1c8bd8d31f5", "eventTime": "2018-04-17T11:50:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4d6ce22-07b6-40ce-8a4b-d50cf0afd6ab", "record_id": "flaws_cloudtrail:0000031:b4d6ce22-07b6-40ce-8a4b-d50cf0afd6ab", "row_index": 31, "timestamp": "2018-04-17T11:51:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4d6ce22-07b6-40ce-8a4b-d50cf0afd6ab", "eventTime": "2018-04-17T11:51:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e50fc80f-4f19-43e5-a172-e031b014c10f", "record_id": "flaws_cloudtrail:0000032:e50fc80f-4f19-43e5-a172-e031b014c10f", "row_index": 32, "timestamp": "2018-04-17T11:51:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e50fc80f-4f19-43e5-a172-e031b014c10f", "eventTime": "2018-04-17T11:51:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f0079c-48ea-4e8e-b464-9e489ef6df8c", "record_id": "flaws_cloudtrail:0000033:39f0079c-48ea-4e8e-b464-9e489ef6df8c", "row_index": 33, "timestamp": "2018-04-17T11:51:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f0079c-48ea-4e8e-b464-9e489ef6df8c", "eventTime": "2018-04-17T11:51:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2788fd9-444f-4667-9092-1765c289604d5", "record_id": "flaws_cloudtrail:0000034:d2788fd9-444f-4667-9092-1765c289604d5", "row_index": 34, "timestamp": "2018-04-17T11:51:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2788fd9-444f-4667-9092-1765c289604d5", "eventTime": "2018-04-17T11:51:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b643959-c68a-4e05-9e63-6e9f1b1e98c7", "record_id": "flaws_cloudtrail:0000035:b643959-c68a-4e05-9e63-6e9f1b1e98c7", "row_index": 35, "timestamp": "2018-04-17T11:51:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b643959-c68a-4e05-9e63-6e9f1b1e98c7", "eventTime": "2018-04-17T11:51:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a095011-d043-4f76-a124-3c48472ba", "record_id": "flaws_cloudtrail:0000036:4a095011-d043-4f76-a124-3c48472ba", "row_index": 36, "timestamp": "2018-04-17T11:51:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a095011-d043-4f76-a124-3c48472ba", "eventTime": "2018-04-17T11:51:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c53b1204-57e8-4cb6-9b28-52e1eec22ffb", "record_id": "flaws_cloudtrail:0000037:c53b1204-57e8-4cb6-9b28-52e1eec22ffb", "row_index": 37, "timestamp": "2018-04-17T11:51:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c53b1204-57e8-4cb6-9b28-52e1eec22ffb", "eventTime": "2018-04-17T11:51:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d999eed9-0931-40d5-9c00-b893770fa", "record_id": "flaws_cloudtrail:0000038:d999eed9-0931-40d5-9c00-b893770fa", "row_index": 38, "timestamp": "2018-04-17T11:51:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d999eed9-0931-40d5-9c00-b893770fa", "eventTime": "2018-04-17T11:51:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b148a18-85de-45e7-84a7-61c0bfb38ad0", "record_id": "flaws_cloudtrail:0000039:9b148a18-85de-45e7-84a7-61c0bfb38ad0", "row_index": 39, "timestamp": "2018-04-17T11:51:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b148a18-85de-45e7-84a7-61c0bfb38ad0", "eventTime": "2018-04-17T11:51:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "761383e7-a54d-4d85-868e-eed62bc27255", "record_id": "flaws_cloudtrail:0000040:761383e7-a54d-4d85-868e-eed62bc27255", "row_index": 40, "timestamp": "2018-04-17T11:51:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "761383e7-a54d-4d85-868e-eed62bc27255", "eventTime": "2018-04-17T11:51:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51437e9-98d7-4d59-a661-7950b85eeab6", "record_id": "flaws_cloudtrail:0000041:51437e9-98d7-4d59-a661-7950b85eeab6", "row_index": 41, "timestamp": "2018-04-17T11:51:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51437e9-98d7-4d59-a661-7950b85eeab6", "eventTime": "2018-04-17T11:51:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598140cc-fa87-4b0c-aca7-a8f9fe96f53c", "record_id": "flaws_cloudtrail:0000042:598140cc-fa87-4b0c-aca7-a8f9fe96f53c", "row_index": 42, "timestamp": "2018-04-17T11:51:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598140cc-fa87-4b0c-aca7-a8f9fe96f53c", "eventTime": "2018-04-17T11:51:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a9d325-19a5-4975-b7aa-0cb662741485", "record_id": "flaws_cloudtrail:0000043:92a9d325-19a5-4975-b7aa-0cb662741485", "row_index": 43, "timestamp": "2018-04-17T11:51:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a9d325-19a5-4975-b7aa-0cb662741485", "eventTime": "2018-04-17T11:51:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4fb6082-c5c3-4128-980a-e84d3f170df9", "record_id": "flaws_cloudtrail:0000044:d4fb6082-c5c3-4128-980a-e84d3f170df9", "row_index": 44, "timestamp": "2018-04-17T11:51:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4fb6082-c5c3-4128-980a-e84d3f170df9", "eventTime": "2018-04-17T11:51:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a055f3f1-fa03-460b-9471-bd629a2e510c", "record_id": "flaws_cloudtrail:0000045:a055f3f1-fa03-460b-9471-bd629a2e510c", "row_index": 45, "timestamp": "2018-04-17T11:51:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a055f3f1-fa03-460b-9471-bd629a2e510c", "eventTime": "2018-04-17T11:51:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d6f0158-99d4-4a97-a000-52526ad5b158", "record_id": "flaws_cloudtrail:0000046:5d6f0158-99d4-4a97-a000-52526ad5b158", "row_index": 46, "timestamp": "2018-04-17T11:51:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d6f0158-99d4-4a97-a000-52526ad5b158", "eventTime": "2018-04-17T11:51:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GA5TiTyxgrpq0LEFBq_FCLU73X35K0g940__UluiBxwcuUhsDJhKyTZtPDZwJIfs-R66GIhr5FaDAC3_SNroarrOc1PwgwOy8yAWFUSiKXXc0vWebVGc0cU0-LEKE1Sm71f5ZN9X6rKNC9QaGQg7A_zmmH1k4ZHnryMDEldZzB8JaH9x7ztFRdT-JvXDhL1n-xvB0a2hf41cH4nLHh9b0VfjWE4Mn75B3FUeCpvhEZLM8Bgsyxx0jwRjl67a_B-SSRFiHc0wbtllea5aBlz23g6N7tCwsbt9QWwZwlfegaSh5qcUmlNpX5VEnQ7OrfVJbaKQFBQ64sYm7z31gPOWpF5ePqrdeZDH3QiZN-B6yWK6lPy2MBaHNpz69iFfpKGRRH5CTVFHgeaQjVg_obOPxnWnxh8BOnyKkuCmlui2X0-Y_eli8U2jGsedHnDBKES7958QlxYBH8Limfs_4eOA4W-rMdG8skPFNnUL0_J-Zytz5obTlZG4Cx_CRbDi3IRijVTjIHmTOUfRI7Ed1vfs8e6L9Dd84GbyJty5u2-bc0QmIuzoNigRKfz6GS14laHfuiYWH-wPdGrMW8OcQ-taBoPOonZ-TaLVxkxiAFQXhzojf3cQxJp4jJwvavkVRO4lXzo_cJv1JiKXKKW5Fc-yaFO9q2IGPKdUvg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf404127a-5833-47f1-98dc-a50294773ec0", "record_id": "flaws_cloudtrail:0000047:cf404127a-5833-47f1-98dc-a50294773ec0", "row_index": 47, "timestamp": "2018-04-17T11:51:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf404127a-5833-47f1-98dc-a50294773ec0", "eventTime": "2018-04-17T11:51:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: I38eBdQtLYvgz_1fuspMsY00BOreMYV8mJejKsY0uqxhJINETRxnzHSk_Q1cm-E1RvfbRcFRLeqUjDhIKchJYCs2BBKkaXKi6DSxBEtkIAmJaU1HdIfoUsAV76UcZhIP6m5eqFAmFO4Hl4ztTIv6scACiRvLAun8WvOD-yMzyachMC0zImI5ugfTO_Xqzdz_SZNyS-6x-REuE5e9LEsr0hlQwQVQX30VfaeXqzU5Gc76hlOf24ycW4-9LNdoxiCNhrMOdrd-YQFR9l87qXgJ5WGyzeMH2MhB6pdn6rDUDXPBA9ohYc7_lcqEp-DHWm2upeae32Mz0CEM2F0nojJoTkrxxOVN7fts4uLHlRiNXOUXbLmvxE-ACXiZmmKL1Ki6PTVCzktwjr8_T8V_FRMQ4i7efrxIHKyr63sluf1dKYFh5FXUyldznCnvWXGP0076DZW66-w9dZSYS1Mxl2pLVIveWlHbxtZGwIGVe1xhxM24z81mqXCZOpLbxRCc0zh3-DbB08bwsFt41zFVIdfXeDS-IUtfvg9brwlcgg94fl2QW2XXP10RWCudTIFnI3vo86Yn8-x_08vqDf7vZquEbIpPedtDbtNFCsW8fXzAjMMWmFRnFM_2dzzD8mQiGrpMpQw8xUQYrkBz5fZRzCNamvNfTQgB_W9AD58", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28ca2855-da36-4e62-99d5-3e802d19aa15", "record_id": "flaws_cloudtrail:0000048:28ca2855-da36-4e62-99d5-3e802d19aa15", "row_index": 48, "timestamp": "2018-04-17T11:51:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28ca2855-da36-4e62-99d5-3e802d19aa15", "eventTime": "2018-04-17T11:51:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f158c6d-df7d-46bd-8091-dd3c5e4e3b98", "record_id": "flaws_cloudtrail:0000049:4f158c6d-df7d-46bd-8091-dd3c5e4e3b98", "row_index": 49, "timestamp": "2018-04-17T11:51:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 2026, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f158c6d-df7d-46bd-8091-dd3c5e4e3b98", "eventTime": "2018-04-17T11:51:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: M87sJ-tR4XfHSMdq2j5O-Vvin0DNcyJCD6dNp5H0n2TXPM0hscIjqp7ZfCRsc3Fwzi07hQv_D8OoDkyXV9R0N9NPbznBQbSEG2PWGPVK325vq2npFj73JgqOiJSmwZJkMG17S88zsjwbCpcAQ-YeidS6H5IJheZB9CNms_zfKt_lmUnKA9qYRUYvTcke2E4EUvwhyT1N9pBvQBCuH8tXZsBAs4cJcl0xfNyoG4T6WVAS-Eo0wQVWfxPCWh170EOWyf9z65m7OZgyX938JmMkEQ4bDRBF69L-wQYxHKqlBikbmKDLh2--P3h3phuBXFKTxYugAGqcxscJNZa_pKgggEqDiw54ubodgpQ7F5VMLIMnpCN9e6MgwwCh7GavuYkxVylBXhzkwoMQonsyCm4JSrtud5-QZrimbyGCnlyRA2c21dn8G-8XgZnIKpZbly3WuqXv5rNQKtczW65klGsBLoSigiPvjxapWJB0csyBeU2FVOfLXSp_QQTtT2dhYHC1v30ECElGf67o7LC8vUPpp-ZrABPWztoIWCoRU7t6ke2lsvV6DfI7fgowEiBehCYeoMG9auSz5UoSz4pxcuI55LAstx4Cu379wS549L6D08ueYBCHguu-NCzQ6xbM5XPYqi-gOh7DZEi57OQyhzlY_9dsOGryWGIQgTR2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9214c08e-09c7-4d77-a12f-c65a2d55e44c", "record_id": "flaws_cloudtrail:0000050:9214c08e-09c7-4d77-a12f-c65a2d55e44c", "row_index": 50, "timestamp": "2018-04-17T11:51:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9214c08e-09c7-4d77-a12f-c65a2d55e44c", "eventTime": "2018-04-17T11:51:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e97bc930-5979-440e-ad8b-0b7041786ff5", "record_id": "flaws_cloudtrail:0000051:e97bc930-5979-440e-ad8b-0b7041786ff5", "row_index": 51, "timestamp": "2018-04-17T11:51:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e97bc930-5979-440e-ad8b-0b7041786ff5", "eventTime": "2018-04-17T11:51:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d62b320-2f1c-44ee-be10-85065e84ecb", "record_id": "flaws_cloudtrail:0000052:1d62b320-2f1c-44ee-be10-85065e84ecb", "row_index": 52, "timestamp": "2018-04-17T11:51:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d62b320-2f1c-44ee-be10-85065e84ecb", "eventTime": "2018-04-17T11:51:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02ea06e5-b5b0-4c90-980f-8615a763bb40", "record_id": "flaws_cloudtrail:0000053:02ea06e5-b5b0-4c90-980f-8615a763bb40", "row_index": 53, "timestamp": "2018-04-17T11:51:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02ea06e5-b5b0-4c90-980f-8615a763bb40", "eventTime": "2018-04-17T11:51:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWUZ81Y3BHO58YA2A", "expiration": "Apr 17, 2018 6:04:23 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "612430b4-cb06-4b86-9d65-9254f23cbb25", "record_id": "flaws_cloudtrail:0000054:612430b4-cb06-4b86-9d65-9254f23cbb25", "row_index": 54, "timestamp": "2018-04-17T11:51:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "612430b4-cb06-4b86-9d65-9254f23cbb25", "eventTime": "2018-04-17T11:51:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83702d-236a-428c-85a4-4cfef4d3a7e5", "record_id": "flaws_cloudtrail:0000055:83702d-236a-428c-85a4-4cfef4d3a7e5", "row_index": 55, "timestamp": "2018-04-17T11:51:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83702d-236a-428c-85a4-4cfef4d3a7e5", "eventTime": "2018-04-17T11:51:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e950c52-1201-46ff-9914-3ab89f6de294", "record_id": "flaws_cloudtrail:0000056:9e950c52-1201-46ff-9914-3ab89f6de294", "row_index": 56, "timestamp": "2018-04-17T11:51:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e950c52-1201-46ff-9914-3ab89f6de294", "eventTime": "2018-04-17T11:51:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030f7bec-1bc5-4284-b120-a7565d10e242", "record_id": "flaws_cloudtrail:0000057:030f7bec-1bc5-4284-b120-a7565d10e242", "row_index": 57, "timestamp": "2018-04-17T11:51:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030f7bec-1bc5-4284-b120-a7565d10e242", "eventTime": "2018-04-17T11:51:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5efea049-5354-49ad-a5af-ec18dee40b0b", "record_id": "flaws_cloudtrail:0000058:5efea049-5354-49ad-a5af-ec18dee40b0b", "row_index": 58, "timestamp": "2018-04-17T11:51:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5efea049-5354-49ad-a5af-ec18dee40b0b", "eventTime": "2018-04-17T11:51:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80149e-ce28-468d-8f2e-9b82ff0de13c", "record_id": "flaws_cloudtrail:0000059:80149e-ce28-468d-8f2e-9b82ff0de13c", "row_index": 59, "timestamp": "2018-04-17T11:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80149e-ce28-468d-8f2e-9b82ff0de13c", "eventTime": "2018-04-17T11:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666e4456-1a3b-4820-a42b-dd1f50b6edf5", "record_id": "flaws_cloudtrail:0000060:666e4456-1a3b-4820-a42b-dd1f50b6edf5", "row_index": 60, "timestamp": "2018-04-17T11:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666e4456-1a3b-4820-a42b-dd1f50b6edf5", "eventTime": "2018-04-17T11:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee082912-7dd9-44c2-b20b-8ae7cb1e9068", "record_id": "flaws_cloudtrail:0000061:eee082912-7dd9-44c2-b20b-8ae7cb1e9068", "row_index": 61, "timestamp": "2018-04-17T11:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee082912-7dd9-44c2-b20b-8ae7cb1e9068", "eventTime": "2018-04-17T11:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5e672e8-7111-4b7d-b715-94d15da14c7d", "record_id": "flaws_cloudtrail:0000062:c5e672e8-7111-4b7d-b715-94d15da14c7d", "row_index": 62, "timestamp": "2018-04-17T11:51:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5e672e8-7111-4b7d-b715-94d15da14c7d", "eventTime": "2018-04-17T11:51:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "040dad71-f1c2-4fd4-8776-5f151644cd", "record_id": "flaws_cloudtrail:0000063:040dad71-f1c2-4fd4-8776-5f151644cd", "row_index": 63, "timestamp": "2018-04-17T11:51:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "040dad71-f1c2-4fd4-8776-5f151644cd", "eventTime": "2018-04-17T11:51:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3e78ff-4832-4b62-a578-7fc3d6dbb0da", "record_id": "flaws_cloudtrail:0000064:ba3e78ff-4832-4b62-a578-7fc3d6dbb0da", "row_index": 64, "timestamp": "2018-04-17T11:51:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3e78ff-4832-4b62-a578-7fc3d6dbb0da", "eventTime": "2018-04-17T11:51:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc871841-7df3-4212-a403-7bdd0d7cb46e", "record_id": "flaws_cloudtrail:0000065:bc871841-7df3-4212-a403-7bdd0d7cb46e", "row_index": 65, "timestamp": "2018-04-17T11:51:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc871841-7df3-4212-a403-7bdd0d7cb46e", "eventTime": "2018-04-17T11:51:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e3f5915-6c87-49d8-88d1-06db6390aedd", "record_id": "flaws_cloudtrail:0000066:5e3f5915-6c87-49d8-88d1-06db6390aedd", "row_index": 66, "timestamp": "2018-04-17T11:51:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e3f5915-6c87-49d8-88d1-06db6390aedd", "eventTime": "2018-04-17T11:51:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49f9280-7e30-46a6-b830-3cd91ed6cfd6", "record_id": "flaws_cloudtrail:0000067:a49f9280-7e30-46a6-b830-3cd91ed6cfd6", "row_index": 67, "timestamp": "2018-04-17T11:51:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49f9280-7e30-46a6-b830-3cd91ed6cfd6", "eventTime": "2018-04-17T11:51:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e9288f-c86a-4d48-a61c-229df366f117", "record_id": "flaws_cloudtrail:0000068:61e9288f-c86a-4d48-a61c-229df366f117", "row_index": 68, "timestamp": "2018-04-17T11:51:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e9288f-c86a-4d48-a61c-229df366f117", "eventTime": "2018-04-17T11:51:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1fb3297-00cb-4e97-984a-0d783b83ea6e", "record_id": "flaws_cloudtrail:0000069:c1fb3297-00cb-4e97-984a-0d783b83ea6e", "row_index": 69, "timestamp": "2018-04-17T11:51:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1fb3297-00cb-4e97-984a-0d783b83ea6e", "eventTime": "2018-04-17T11:51:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e8014d-054a-4513-bc5b-e55d9b9bd84e", "record_id": "flaws_cloudtrail:0000070:48e8014d-054a-4513-bc5b-e55d9b9bd84e", "row_index": 70, "timestamp": "2018-04-17T11:51:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e8014d-054a-4513-bc5b-e55d9b9bd84e", "eventTime": "2018-04-17T11:51:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bffdbab-d85c-44bf-9482-620b9ae30911", "record_id": "flaws_cloudtrail:0000071:4bffdbab-d85c-44bf-9482-620b9ae30911", "row_index": 71, "timestamp": "2018-04-17T11:51:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bffdbab-d85c-44bf-9482-620b9ae30911", "eventTime": "2018-04-17T11:51:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec023559-9114-4d4a-a8a3-5c3fc4aaf334", "record_id": "flaws_cloudtrail:0000072:ec023559-9114-4d4a-a8a3-5c3fc4aaf334", "row_index": 72, "timestamp": "2018-04-17T11:51:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec023559-9114-4d4a-a8a3-5c3fc4aaf334", "eventTime": "2018-04-17T11:51:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OoOD55-FE5YUsCkTo5ZyKClCKgFyWxvIuks0RMKvUT3a6TjHHkcgPUtBx3BQhi7vfw1-uB4iKbO-UR3FBIZ9fX_TYclvflOVVK2z_DYBCGLxQ4SLhLOK9xWIWLQwtOZuuWLcIIVZ641VUm-gUFsonbRr9ZPi2AfPnaWDOaDoJPXotGZHWcYuGc0YPjvrphB-exdxs_oOiGQrZqwtJl5-2RCn70nfufAqHVSR9CV1sGIbyJy9Q6cuL9uYc5vzZBjQdrTR2t5hQDwSKxZnZAzGuwbN0-Rsk6RlXnoP-rPf3xAFir9-cUsgg9UvYh5J2DufgFN7Dmz8tvEe_fPh2tkWWGzYm2se4TKOrRZAXOz69SJgtUiiNd39AgVvoBOY_-bUfUbplt0170fm_Ih3T4tEnohaK5XEvC33bivoajP971KN6btU5NBVjXhM9PEXDzn-LLKyLKide_jDOm2sHnlkZEFi5xIxn8EIL3yeCz4SR0ncf1E8n-4BNiGAMkPvpt4JkUqZPv6SINULVv_BwY_IWamNMIBicyLkVhh7MnjXACbo2e4ELov5XFS-10IPPsP8la8zuz_vQupdlVUEy3v9nMEqMbQKSvy49d5QCbUBJufXh7haKZSCGMzP_oCF3_ckq5XMUPYT8t4JkL2irv7yQAMmUALv2yoV17w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10757cb-af53-4101-929f-3d32e7dcf073", "record_id": "flaws_cloudtrail:0000073:c10757cb-af53-4101-929f-3d32e7dcf073", "row_index": 73, "timestamp": "2018-04-17T11:51:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1288, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10757cb-af53-4101-929f-3d32e7dcf073", "eventTime": "2018-04-17T11:51:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeba7cc3-2d45-42ee-a3c3-20a7051f267e", "record_id": "flaws_cloudtrail:0000074:eeba7cc3-2d45-42ee-a3c3-20a7051f267e", "row_index": 74, "timestamp": "2018-04-17T11:51:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeba7cc3-2d45-42ee-a3c3-20a7051f267e", "eventTime": "2018-04-17T11:51:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e523289a4-ee18-44a4-b7bf-d780b2afd6e7", "record_id": "flaws_cloudtrail:0000075:e523289a4-ee18-44a4-b7bf-d780b2afd6e7", "row_index": 75, "timestamp": "2018-04-17T11:51:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e523289a4-ee18-44a4-b7bf-d780b2afd6e7", "eventTime": "2018-04-17T11:51:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: NGvv7m6StmxSDJthcxWyYNV6AMyRIztDswlHL39NHAPt16f0rq7MUSHG0G_ejk7rBMC6dCPOJghCBpfyQpQHvx52heHhckwYRzfu0NOcUAK2z00wy9QFxFmpXAbaxmGldgwNHyBKs-OhaJsscZ8dnqKKBPmClyV99ch_J4lb0CK6JKRWkP8NuxyKdTKRNiN9nuoZutW1Ee2k94yOPFX5efNXsOO_su5UQVxeXwLmQEiYdZgPs-jeUqyRZGFNqQ7o3J5z2MKenW1b_eI4B3kR-BzVKKujTn0Hv25iKLNiiAwVXPb_KxHXm1TqFLQNZxL_wssQ4Q3BCOukB4NsycjpaB_hEv__hVr3dF-D160M0jWL3ZZzTCeAiZ65LorrtpJQxgRCP-uY2MhL8xH1u_M98FBn7OT42Mx7WbwMqMNshFwoqwrvqaLTu58RZkHSURqiXnudhjIiQceRAbIkYrfWELGUZdoqPmw-ZW8SJIvSgKSuSD7X-rbQRFUj7a6fq_9SETpubaKFc7ICicAs_wM_NPV0cBbUWn2IcO7anGAQZ4x0aVnOtSeSfSBj8uERR-sHkLUYqlngr_LhtUC2_I_IXlkBvjNaQeQG9jYHdjrcjDhE00NS_gMYyH2BdsP1-9oLbFcKfhSMDXrUCfgTuLkOYtTrjqJtOQspiqE8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5469d4e-519d-4e6a-a88d-bbeb74e5e244", "record_id": "flaws_cloudtrail:0000076:e5469d4e-519d-4e6a-a88d-bbeb74e5e244", "row_index": 76, "timestamp": "2018-04-17T11:51:19Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5469d4e-519d-4e6a-a88d-bbeb74e5e244", "eventTime": "2018-04-17T11:51:19Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22810c38-5308-43b7-bf13-300d6878b0b5", "record_id": "flaws_cloudtrail:0000077:22810c38-5308-43b7-bf13-300d6878b0b5", "row_index": 77, "timestamp": "2018-04-17T11:51:20Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22810c38-5308-43b7-bf13-300d6878b0b5", "eventTime": "2018-04-17T11:51:20Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b43eac6-3673-40fd-b02f-ce5333a7e222", "record_id": "flaws_cloudtrail:0000078:5b43eac6-3673-40fd-b02f-ce5333a7e222", "row_index": 78, "timestamp": "2018-04-17T11:51:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1930, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b43eac6-3673-40fd-b02f-ce5333a7e222", "eventTime": "2018-04-17T11:51:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fRnNtGafmiLe_o4LItjISWoh7edZcd5U1cCiZt7MmlMdqus3xTAsFB4zhTtwzFRKwzA8IAXqMppVtyblE8vIBNooMA5nF4psCAEC8VXlzL4nrn46taltG0Pv507914USOOCIMNib1Onma48DwlGqRdyPsoni1FGLFu9WRXMFHjCbkB7lFFi4H_Phcjnmut58X0JTbGn98EW5jcIjvPlmDUS8Zy3Vxzb5U2t3nGSqthjhBqUaaaXVlVVTdFbMO_JwRU0NRv0KzIGDQjgbDqjgLNflFiRq2Scb4-km1W4tUaUkqIe3hEWpcfT6gEQ-Eay-lduW5qQdNu5vqzeS8CAFmTTgjBnBrhQPMPvplYYcI_W-Bfo64ZcOvaQs25dWZfpZ2zXb0wPgaZYpxwiCTFINQ8IuK2WsWPq9YfeUaM9cMOJPM5JlmgFiypKSyNIieZZ75XMrQh7LAf5_SBYZVTbH-7uYEvx9PzCQ14p7cUSzIoPvXQmjmEbru_SWihkhLn6OAswZKwZF96jYiYBi_SMRFFhERA-G1XI-QbdpdltGQk7o_B_-pkfVi9WbVhN6vYzWBDFyK_asVNZWwTxf1Nbcgrs0ScIZA4tI0hPfh86rLrnvYKtNinZXK7INuChpZ96Ppat97sVMtm1YsiwjcmGafMtaQNvwDlJa_aZPV", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e2a5869-8c46-4264-8525-ac4f1ee68d43", "record_id": "flaws_cloudtrail:0000079:0e2a5869-8c46-4264-8525-ac4f1ee68d43", "row_index": 79, "timestamp": "2018-04-17T11:51:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e2a5869-8c46-4264-8525-ac4f1ee68d43", "eventTime": "2018-04-17T11:51:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1104a72-563e-40de-9edf-e576b6440c05", "record_id": "flaws_cloudtrail:0000080:f1104a72-563e-40de-9edf-e576b6440c05", "row_index": 80, "timestamp": "2018-04-17T11:51:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1104a72-563e-40de-9edf-e576b6440c05", "eventTime": "2018-04-17T11:51:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9084d84-dbaa-4584-aaf3-87906bfc63e", "record_id": "flaws_cloudtrail:0000081:b9084d84-dbaa-4584-aaf3-87906bfc63e", "row_index": 81, "timestamp": "2018-04-17T11:51:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9084d84-dbaa-4584-aaf3-87906bfc63e", "eventTime": "2018-04-17T11:51:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afdf7b7e-7746-41ff-aa7f-2313ff40a41b", "record_id": "flaws_cloudtrail:0000082:afdf7b7e-7746-41ff-aa7f-2313ff40a41b", "row_index": 82, "timestamp": "2018-04-17T11:51:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afdf7b7e-7746-41ff-aa7f-2313ff40a41b", "eventTime": "2018-04-17T11:51:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cd4dfab-f802-4935-944d-d8cefc745a5e", "record_id": "flaws_cloudtrail:0000083:0cd4dfab-f802-4935-944d-d8cefc745a5e", "row_index": 83, "timestamp": "2018-04-17T11:51:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cd4dfab-f802-4935-944d-d8cefc745a5e", "eventTime": "2018-04-17T11:51:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dad0cd8-cdf0-4434-9e4d-c7d558b28f7d", "record_id": "flaws_cloudtrail:0000084:4dad0cd8-cdf0-4434-9e4d-c7d558b28f7d", "row_index": 84, "timestamp": "2018-04-17T11:51:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dad0cd8-cdf0-4434-9e4d-c7d558b28f7d", "eventTime": "2018-04-17T11:51:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4dc457f-7c5b-413d-8b96-8b1d77cad9a0", "record_id": "flaws_cloudtrail:0000085:e4dc457f-7c5b-413d-8b96-8b1d77cad9a0", "row_index": 85, "timestamp": "2018-04-17T11:51:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4dc457f-7c5b-413d-8b96-8b1d77cad9a0", "eventTime": "2018-04-17T11:51:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6c2133-9405-4d75-b2d0-4b2244dcad88", "record_id": "flaws_cloudtrail:0000086:bd6c2133-9405-4d75-b2d0-4b2244dcad88", "row_index": 86, "timestamp": "2018-04-17T11:51:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6c2133-9405-4d75-b2d0-4b2244dcad88", "eventTime": "2018-04-17T11:51:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "533ef53c-f2bc-4801-9f1b-c9e7e93ba90e", "record_id": "flaws_cloudtrail:0000087:533ef53c-f2bc-4801-9f1b-c9e7e93ba90e", "row_index": 87, "timestamp": "2018-04-17T11:51:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "533ef53c-f2bc-4801-9f1b-c9e7e93ba90e", "eventTime": "2018-04-17T11:51:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5596dd31-302b-43fb-9c8f-9ecf63059610", "record_id": "flaws_cloudtrail:0000088:5596dd31-302b-43fb-9c8f-9ecf63059610", "row_index": 88, "timestamp": "2018-04-17T11:51:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5596dd31-302b-43fb-9c8f-9ecf63059610", "eventTime": "2018-04-17T11:51:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e4730a-147b-4240-bdc1-aaf99ece2622", "record_id": "flaws_cloudtrail:0000089:c7e4730a-147b-4240-bdc1-aaf99ece2622", "row_index": 89, "timestamp": "2018-04-17T11:51:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e4730a-147b-4240-bdc1-aaf99ece2622", "eventTime": "2018-04-17T11:51:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d35f5e-5c6d-473d-934c-5ff488512f02", "record_id": "flaws_cloudtrail:0000090:30d35f5e-5c6d-473d-934c-5ff488512f02", "row_index": 90, "timestamp": "2018-04-17T11:51:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d35f5e-5c6d-473d-934c-5ff488512f02", "eventTime": "2018-04-17T11:51:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94848-195c-4041-9f1f-7ec22ea94022", "record_id": "flaws_cloudtrail:0000091:94848-195c-4041-9f1f-7ec22ea94022", "row_index": 91, "timestamp": "2018-04-17T11:51:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1373, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94848-195c-4041-9f1f-7ec22ea94022", "eventTime": "2018-04-17T11:51:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42cf9c60-d0f8-498e-a3a3-c430348dbe6", "record_id": "flaws_cloudtrail:0000092:42cf9c60-d0f8-498e-a3a3-c430348dbe6", "row_index": 92, "timestamp": "2018-04-17T11:51:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42cf9c60-d0f8-498e-a3a3-c430348dbe6", "eventTime": "2018-04-17T11:51:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd0d515e-667c-4681-b728-718cf74ea1fb", "record_id": "flaws_cloudtrail:0000093:fd0d515e-667c-4681-b728-718cf74ea1fb", "row_index": 93, "timestamp": "2018-04-17T11:51:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd0d515e-667c-4681-b728-718cf74ea1fb", "eventTime": "2018-04-17T11:51:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7d4129d-5f87-4286-bf76-c1ebb42dabb5", "record_id": "flaws_cloudtrail:0000094:f7d4129d-5f87-4286-bf76-c1ebb42dabb5", "row_index": 94, "timestamp": "2018-04-17T11:51:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7d4129d-5f87-4286-bf76-c1ebb42dabb5", "eventTime": "2018-04-17T11:51:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62f0243a-a6e4-4e0b-ba3e-01a1e0af514d", "record_id": "flaws_cloudtrail:0000095:62f0243a-a6e4-4e0b-ba3e-01a1e0af514d", "row_index": 95, "timestamp": "2018-04-17T11:51:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62f0243a-a6e4-4e0b-ba3e-01a1e0af514d", "eventTime": "2018-04-17T11:51:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VBTsAU-_toL8nqlQoKRFAzdO2sWM_Fy-Yq9G2TuK1uyKqyKgVgdeW4xo4uDW5JP9_qJb7MYY2Aep-77bv7G7izjoq8v-HBdQiJjMnUXQjHdAT_TpIly1L2ARvOdesHfzVbEFh2dlCacBuew-Z1i8Qh32zmD4bU-7XS7mb7Q8IA5zKzGG0TWLCMUdAvHpdjBVCNZTYAblGTSjvxxDs-YFFkKiV2XkcAiVFjyVjgdfprKu-va754R1clsYQoZAbAm9gm1JpOVoGYC4DTFuP_n8Hc_dZZI_J8-jiavVLAgVlbVWVAJYASbxUrcs0TmDX4W9pGNs7b_2VuA-xEC-eN1n86pSOZE7-SJEXk57wvm2qxcL5LAIYoL_w_zQ_zKMaRBlpBhlS423SMbB5qfwZU78HbRAgLuSU5E-HUS6-wgew_HIRJBUgpOj3EbWDJ-SEByJUEaZfp2PCDl_vxVVn6C31qWZPFqA86zpeot4ilWiQLKeRBBRguSni7RK8lFd_w9m3hMYenabXnHc4dAcuTEnxEVbhuS4ptX1Uu1VkLc9_WsBpqJMRrDA9B5gjtVPqR0fyIHjnTQ0ewOFBr5tCDbyOzTsBhHWAfisEoLr97bt3aYfhR-OrF6FpNdzNxhruShjHue_QxwvmhJgQZ9G0SVkmvgnrTu1KVgBuuQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8af718e-dc8b-4edc-88cf-9242ea893562", "record_id": "flaws_cloudtrail:0000096:c8af718e-dc8b-4edc-88cf-9242ea893562", "row_index": 96, "timestamp": "2018-04-17T11:51:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8af718e-dc8b-4edc-88cf-9242ea893562", "eventTime": "2018-04-17T11:51:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7xHeouIqj7wil8ebeTsSRsOFqVUO5m92sDl5IWMG1sx3xzJ10OaGZZ_B-gkrJ4RIi-4G2eFc6HYFInYaaCoPHocFxepkNuOuBofyPQWJLaPP6fcJOGMFoW6TtETjo9RrkuFycbxjTb2he5xakwYeXmZwfDOK30kiTWU3sM-G9VOUqOHDOvKodPhgvrvXEs6SDzE5PLOWsoOhlvqTJkXq9xKC7B73z66XKsUlClIA4Hac3vIcL6uUnnEnN2TEoplJWEDcjtjJnHXSteEwPaZu_Gs3R9ExouJ_Kjy4WADy-p5hiMTSVqi6ThFnh1yI4I6NuCoNFSm9_R7tVHmBcjIZaeyZba1XQ1HDRg1dS8pKswyVHHyZNNGzHslx9flC93R1z1Ma2APtWCyt6FKGjDNDf5W_GKnpsvD8DLYUTmGWn92Hq2aAai9NTxblxPZGb5_marsr_mZOSQEHtKWwbwKBMBZshxi5kaEbkPCrQ4sqOOSn3Pq-AIUkEL1J9p2TKAt2IVjzQOuwmBxy0Ks3OCYPoioWJ3dwxVV4-JurqCUfI0KdfdsdhejcOMazXwZ_9oyqm2FV_l-1cxpbeFyY3cT57XJHUNua40_Ycaet6oon4EEN2RShszaiLvR87fNKjBecKsIQrliQBWLZ6rQsrPfHDzdN6rOu39arvGc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3df2978f-abb7-4c59-91be-59953bbe4dd2", "record_id": "flaws_cloudtrail:0000097:3df2978f-abb7-4c59-91be-59953bbe4dd2", "row_index": 97, "timestamp": "2018-04-17T11:51:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3df2978f-abb7-4c59-91be-59953bbe4dd2", "eventTime": "2018-04-17T11:51:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8652f7b8-269a-40d0-bd5f-84e22bc58e9e", "record_id": "flaws_cloudtrail:0000098:8652f7b8-269a-40d0-bd5f-84e22bc58e9e", "row_index": 98, "timestamp": "2018-04-17T11:51:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8652f7b8-269a-40d0-bd5f-84e22bc58e9e", "eventTime": "2018-04-17T11:51:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ad9035e-2014-4f06-baa2-3adcc459966", "record_id": "flaws_cloudtrail:0000099:1ad9035e-2014-4f06-baa2-3adcc459966", "row_index": 99, "timestamp": "2018-04-17T11:51:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ad9035e-2014-4f06-baa2-3adcc459966", "eventTime": "2018-04-17T11:51:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a918ed6-a425-464e-9f17-83a687bf8004", "record_id": "flaws_cloudtrail:0000100:7a918ed6-a425-464e-9f17-83a687bf8004", "row_index": 100, "timestamp": "2018-04-17T11:51:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a918ed6-a425-464e-9f17-83a687bf8004", "eventTime": "2018-04-17T11:51:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55305-a9d6-4954-8110-898574c5552", "record_id": "flaws_cloudtrail:0000101:55305-a9d6-4954-8110-898574c5552", "row_index": 101, "timestamp": "2018-04-17T11:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55305-a9d6-4954-8110-898574c5552", "eventTime": "2018-04-17T11:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34c4174-eb60-45a1-8341-771aabe79d6b", "record_id": "flaws_cloudtrail:0000102:e34c4174-eb60-45a1-8341-771aabe79d6b", "row_index": 102, "timestamp": "2018-04-17T11:51:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34c4174-eb60-45a1-8341-771aabe79d6b", "eventTime": "2018-04-17T11:51:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a084804-ed90-41b3-b4b6-1645abeed70d", "record_id": "flaws_cloudtrail:0000103:a084804-ed90-41b3-b4b6-1645abeed70d", "row_index": 103, "timestamp": "2018-04-17T11:51:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a084804-ed90-41b3-b4b6-1645abeed70d", "eventTime": "2018-04-17T11:51:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c95362e-7676-417f-8089-c170f2af2af1", "record_id": "flaws_cloudtrail:0000104:1c95362e-7676-417f-8089-c170f2af2af1", "row_index": 104, "timestamp": "2018-04-17T11:51:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c95362e-7676-417f-8089-c170f2af2af1", "eventTime": "2018-04-17T11:51:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65e043968-ce40-421a-986c-483797adf0cf", "record_id": "flaws_cloudtrail:0000105:65e043968-ce40-421a-986c-483797adf0cf", "row_index": 105, "timestamp": "2018-04-17T11:51:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1288, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65e043968-ce40-421a-986c-483797adf0cf", "eventTime": "2018-04-17T11:51:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47fa399b-c1ef-4045-bc5d-3a78bc16e88a", "record_id": "flaws_cloudtrail:0000106:47fa399b-c1ef-4045-bc5d-3a78bc16e88a", "row_index": 106, "timestamp": "2018-04-17T11:51:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47fa399b-c1ef-4045-bc5d-3a78bc16e88a", "eventTime": "2018-04-17T11:51:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -y7s90JBM9dQuJG8SH1buyVwftXgel3QjGe-35BMdaa0VDOA0YMEjRTcWD3IAPmPw22YSye-XcI1k7GsoYI5zqAhccG5UHDSv8NduXF46Qv1s3wX49_rOyiTciqt6ZBNaOpiTC00fBMS7f6aJ5a_LJLgRR_BAdsPVRxyGI5syGUpHHH_Yj6jqvRYW6pF_96oY74q_PxOMaWVAwxlegS5-biZ_RUE4gqPON4fAYzdXcFW4LtX573aeiRnVGbyvYfbL-E5Thn17behzT9FrAqcKwoOEQwt8TC5nCrZbZqAGoqOqT-62gA4sBvagnXBlt8BfE1f0fGhKw1OORWZK9cNsLIqjdnJL1adIYOTMpg2uXTVTmJlauAlTibbrOsFRQSkr1DcrTLdOFI-ZOXnyXHdKF04xuHtDVh7npBj-zyoiKS9PUpJX8o-Fq4ILvowDRTSV3zZ8d5vwKaPmpnsihazZab3PWzRS5gllkPoT0VqPBT-zTPgbt7SB6BDRxEII7cwyejqr8_2WwqH47g_7Yd1wmVnjqQlqQGAWHMRWwuyQZHI3GBpO6xsu7PFvLRLTnUWmt8qgApIg8wFBNEEusroOsQxIxxIvI3ynMztQW5je2Gt6-40MJnP3Dbrgr4yHdB-UAXLrd4H90EM32H2denea8qrba3neN2kKjY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979ff710-5f29-4c68-814b-04e59bbdb3ed", "record_id": "flaws_cloudtrail:0000107:979ff710-5f29-4c68-814b-04e59bbdb3ed", "row_index": 107, "timestamp": "2018-04-17T11:51:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979ff710-5f29-4c68-814b-04e59bbdb3ed", "eventTime": "2018-04-17T11:51:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GFq-bPtik_cfXQjvcovuGNqsx0eS6nniXB0kC2xK_ZDE6KDKD9deJddqdOI4H55HGDN3KFxwETFEZxvTr41pUdAnIKUgJ79xMZE8txZ02s0U4JSUp5Y8pDmE5lfpypmOwLedNnhykd83wsy9e1HNqzhullW0wgt20-cOjDXO6pEbLbGEBm3O8vkznJikz-DurNF0p8BrnbPYJa9NIqapBALFHiXSTm31xymh0g_YcaQ7dtX0KbFd3fKoinqlRi-sRoNOsWLtu0NgYXOuLXNAnw4OlunAbypAn7v9e7T7bU2bjiADbNf1jcImBzoOFX--ZKFrR3ghZwTKE8g7bsouM2HEmbUeUBsHMus4KD8snLn5RuXDeA7vDzExRZRWkO2lW7eTXy8NAWCni0wCOErXx5Y91SlFfUuHdfrouz4wXwEfsaFYggYvQFDXLxxOag6t1eQ736Uvx-t2mvmlEniMkM0vCxjPKTTUUSMkG-lGcJRfr3tsoY_3eMpShU7zQ5M-YxoYyxq4QBO0fBt2Vxq5_7AGPD2fGZ0Ffw_YjXtq2JIAqOQnCpw9jqbQrj9CNZTb6F0-SqL8FsZZcniYgzF06csAu1auyXke3qCcr6PmGSFvJBfNkkxhg3dbpTSW8D41Nfwfu98esgbQpTlyOLWZtozCUT45YZ5xFhNJYbLi", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0dc4c74-d443-42ad-821a-1f767dfb0f1f", "record_id": "flaws_cloudtrail:0000108:a0dc4c74-d443-42ad-821a-1f767dfb0f1f", "row_index": 108, "timestamp": "2018-04-17T11:51:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0dc4c74-d443-42ad-821a-1f767dfb0f1f", "eventTime": "2018-04-17T11:51:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feee9c39-17c1-4ff0-affd-efb5367de513", "record_id": "flaws_cloudtrail:0000109:feee9c39-17c1-4ff0-affd-efb5367de513", "row_index": 109, "timestamp": "2018-04-17T12:12:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feee9c39-17c1-4ff0-affd-efb5367de513", "eventTime": "2018-04-17T12:12:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d266a1c9-84d0-4c36-8694-f28b95e32c4e", "record_id": "flaws_cloudtrail:0000110:d266a1c9-84d0-4c36-8694-f28b95e32c4e", "row_index": 110, "timestamp": "2018-04-17T12:12:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d266a1c9-84d0-4c36-8694-f28b95e32c4e", "eventTime": "2018-04-17T12:12:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e10f98d-c08c-4d72-b008-5146fa800e35", "record_id": "flaws_cloudtrail:0000111:5e10f98d-c08c-4d72-b008-5146fa800e35", "row_index": 111, "timestamp": "2018-04-17T12:12:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e10f98d-c08c-4d72-b008-5146fa800e35", "eventTime": "2018-04-17T12:12:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "300352-aa77-448a-b4b9-d4a391ceb6ec", "record_id": "flaws_cloudtrail:0000112:300352-aa77-448a-b4b9-d4a391ceb6ec", "row_index": 112, "timestamp": "2018-04-17T12:12:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "300352-aa77-448a-b4b9-d4a391ceb6ec", "eventTime": "2018-04-17T12:12:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c053e051-a533-4b5d-a1b3-d81e6b42116", "record_id": "flaws_cloudtrail:0000113:c053e051-a533-4b5d-a1b3-d81e6b42116", "row_index": 113, "timestamp": "2018-04-17T12:12:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c053e051-a533-4b5d-a1b3-d81e6b42116", "eventTime": "2018-04-17T12:12:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3188a3c-7067-499b-9662-4fe08748c799", "record_id": "flaws_cloudtrail:0000114:e3188a3c-7067-499b-9662-4fe08748c799", "row_index": 114, "timestamp": "2018-04-17T12:12:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3188a3c-7067-499b-9662-4fe08748c799", "eventTime": "2018-04-17T12:12:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca58dee-9db4-4c91-9d1f-e12aca7dd9bd", "record_id": "flaws_cloudtrail:0000115:bca58dee-9db4-4c91-9d1f-e12aca7dd9bd", "row_index": 115, "timestamp": "2018-04-17T12:12:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca58dee-9db4-4c91-9d1f-e12aca7dd9bd", "eventTime": "2018-04-17T12:12:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d9e11dd-258b-42c0-943d-c5574c4f7fd3", "record_id": "flaws_cloudtrail:0000116:6d9e11dd-258b-42c0-943d-c5574c4f7fd3", "row_index": 116, "timestamp": "2018-04-17T12:12:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d9e11dd-258b-42c0-943d-c5574c4f7fd3", "eventTime": "2018-04-17T12:12:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d75f8c73-2698-4922-82f0-68fab6274cad", "record_id": "flaws_cloudtrail:0000117:d75f8c73-2698-4922-82f0-68fab6274cad", "row_index": 117, "timestamp": "2018-04-17T12:12:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d75f8c73-2698-4922-82f0-68fab6274cad", "eventTime": "2018-04-17T12:12:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5e1f381-540c-4b27-bdeb-f5c615e77483", "record_id": "flaws_cloudtrail:0000118:f5e1f381-540c-4b27-bdeb-f5c615e77483", "row_index": 118, "timestamp": "2018-04-17T12:12:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5e1f381-540c-4b27-bdeb-f5c615e77483", "eventTime": "2018-04-17T12:12:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3667c2a4-0422-4a3c-aba3-a40a6413e632", "record_id": "flaws_cloudtrail:0000119:3667c2a4-0422-4a3c-aba3-a40a6413e632", "row_index": 119, "timestamp": "2018-04-17T12:12:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3667c2a4-0422-4a3c-aba3-a40a6413e632", "eventTime": "2018-04-17T12:12:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623422d-df10-4e51-8a66-6b3f0551fdb4", "record_id": "flaws_cloudtrail:0000120:623422d-df10-4e51-8a66-6b3f0551fdb4", "row_index": 120, "timestamp": "2018-04-17T12:12:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623422d-df10-4e51-8a66-6b3f0551fdb4", "eventTime": "2018-04-17T12:12:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17829c51-a54e-4984-a51e-5d47cd322b44", "record_id": "flaws_cloudtrail:0000121:17829c51-a54e-4984-a51e-5d47cd322b44", "row_index": 121, "timestamp": "2018-04-17T12:12:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17829c51-a54e-4984-a51e-5d47cd322b44", "eventTime": "2018-04-17T12:12:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33f7c97-c0a3-42e8-b120-965b9a64ae04", "record_id": "flaws_cloudtrail:0000122:e33f7c97-c0a3-42e8-b120-965b9a64ae04", "row_index": 122, "timestamp": "2018-04-17T12:12:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33f7c97-c0a3-42e8-b120-965b9a64ae04", "eventTime": "2018-04-17T12:12:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "773551-9aea-4f8e-b783-82cca2b56ebb", "record_id": "flaws_cloudtrail:0000123:773551-9aea-4f8e-b783-82cca2b56ebb", "row_index": 123, "timestamp": "2018-04-17T12:12:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "773551-9aea-4f8e-b783-82cca2b56ebb", "eventTime": "2018-04-17T12:12:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5baab145-dd06-4449-86ce-759105f48280", "record_id": "flaws_cloudtrail:0000124:5baab145-dd06-4449-86ce-759105f48280", "row_index": 124, "timestamp": "2018-04-17T12:12:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5baab145-dd06-4449-86ce-759105f48280", "eventTime": "2018-04-17T12:12:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dcb4045-7313-4d1f-95cb-4f3e9d953078", "record_id": "flaws_cloudtrail:0000125:4dcb4045-7313-4d1f-95cb-4f3e9d953078", "row_index": 125, "timestamp": "2018-04-17T12:12:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dcb4045-7313-4d1f-95cb-4f3e9d953078", "eventTime": "2018-04-17T12:12:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aa2f072-babb-4aa9-9caf-a4ed0610b421", "record_id": "flaws_cloudtrail:0000126:3aa2f072-babb-4aa9-9caf-a4ed0610b421", "row_index": 126, "timestamp": "2018-04-17T12:12:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aa2f072-babb-4aa9-9caf-a4ed0610b421", "eventTime": "2018-04-17T12:12:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31d2177e-dcee-4d46-9841-0514b309dcb5", "record_id": "flaws_cloudtrail:0000127:31d2177e-dcee-4d46-9841-0514b309dcb5", "row_index": 127, "timestamp": "2018-04-17T12:12:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31d2177e-dcee-4d46-9841-0514b309dcb5", "eventTime": "2018-04-17T12:12:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a776136-abc8-46a7-a084-c207d491bd03", "record_id": "flaws_cloudtrail:0000128:5a776136-abc8-46a7-a084-c207d491bd03", "row_index": 128, "timestamp": "2018-04-17T12:12:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a776136-abc8-46a7-a084-c207d491bd03", "eventTime": "2018-04-17T12:12:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a275ef0f-f7fd-4a89-b222-c7a3ae362196e", "record_id": "flaws_cloudtrail:0000129:a275ef0f-f7fd-4a89-b222-c7a3ae362196e", "row_index": 129, "timestamp": "2018-04-17T12:12:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a275ef0f-f7fd-4a89-b222-c7a3ae362196e", "eventTime": "2018-04-17T12:12:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f27293-800d-4deb-b49f-c4995b7275ab", "record_id": "flaws_cloudtrail:0000130:f27293-800d-4deb-b49f-c4995b7275ab", "row_index": 130, "timestamp": "2018-04-17T12:12:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f27293-800d-4deb-b49f-c4995b7275ab", "eventTime": "2018-04-17T12:12:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42e60377-fd4f-4836-a547-8f04db91d592", "record_id": "flaws_cloudtrail:0000131:42e60377-fd4f-4836-a547-8f04db91d592", "row_index": 131, "timestamp": "2018-04-17T12:12:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42e60377-fd4f-4836-a547-8f04db91d592", "eventTime": "2018-04-17T12:12:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca8f0a7-f144-4216-b185-56785e853506d", "record_id": "flaws_cloudtrail:0000132:bca8f0a7-f144-4216-b185-56785e853506d", "row_index": 132, "timestamp": "2018-04-17T12:12:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca8f0a7-f144-4216-b185-56785e853506d", "eventTime": "2018-04-17T12:12:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25693-bb79-491e-9b41-cadbf81eeabf", "record_id": "flaws_cloudtrail:0000133:25693-bb79-491e-9b41-cadbf81eeabf", "row_index": 133, "timestamp": "2018-04-17T12:12:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1923, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25693-bb79-491e-9b41-cadbf81eeabf", "eventTime": "2018-04-17T12:12:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jtEbCzc4DXoqorz-eHmXt_IvTEyWXLV5-C-HkR51r--oMJwsrWNr637puTAdDzBfZMgEk_y3mBlTKyA5qvn5MCzkwaI5MPzGEL5BuIY8QHHi060yPC1-PO5ojYY1bn5sE8wfbTSRDxSa9oOgaky90J6nGnOaErl5fStTZZYLphYv2PthWU8nfgqDMj4ELdGLvzUY6H2dgDe9MWoFaZPmGNNzSN8TNfM0rLBCuG5rGVJyFVi3Hy4vKAb1GVwzJvVlPqh0ozC5fnFF-soqHj8yJQa7uVscXT-sVmO8WBBQUNO2kX6Z50pg2mpH3igD5EIdiWcb-vLJtwbxaWTEknWJMnoKQtguyHfkpQaXDxIeDgPdjegtEcyoitl70o0WiAG471cZ-kTBUtIrbv4Yj-2GPKZqJayEfLhQum6JnOsNy6RY5iBzZlOB0miA3ekhK9Pa3rVWGHKcXNMZE3C321q-YfP-fJjouvtVc7mr9mV5BfN9jJryUY-fbq3V_KFadTDe23iiHPj1b6LzOaS-8ZAwo4uRRKKEtAZ83JTdt7BXGBONCkGjeIoUisGMz-dHjkC2g4NQUz7B2qm5JgaZg4wRt_D22DYOZpiYChVhrH196-RWgNDyuUTxJKDzKZkg1lAb_kMmiiArzTRYRIvWJXa73rS-128IUFRJJg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c94bdf-8406-4cc5-b35a-299fde6cfa79", "record_id": "flaws_cloudtrail:0000134:f0c94bdf-8406-4cc5-b35a-299fde6cfa79", "row_index": 134, "timestamp": "2018-04-17T12:12:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c94bdf-8406-4cc5-b35a-299fde6cfa79", "eventTime": "2018-04-17T12:12:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9046ba6-0bd2-4ca8-a877-298dc1db9d18", "record_id": "flaws_cloudtrail:0000135:b9046ba6-0bd2-4ca8-a877-298dc1db9d18", "row_index": 135, "timestamp": "2018-04-17T12:12:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9046ba6-0bd2-4ca8-a877-298dc1db9d18", "eventTime": "2018-04-17T12:12:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fcd8cbc-3171-46e4-b31c-aec071350b01", "record_id": "flaws_cloudtrail:0000136:0fcd8cbc-3171-46e4-b31c-aec071350b01", "row_index": 136, "timestamp": "2018-04-17T12:12:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fcd8cbc-3171-46e4-b31c-aec071350b01", "eventTime": "2018-04-17T12:12:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee6bb588-e5a6-4fab-8cef-e0bbe820f744", "record_id": "flaws_cloudtrail:0000137:ee6bb588-e5a6-4fab-8cef-e0bbe820f744", "row_index": 137, "timestamp": "2018-04-17T12:12:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee6bb588-e5a6-4fab-8cef-e0bbe820f744", "eventTime": "2018-04-17T12:12:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75385d-bc8c-4a1f-88b7-cd1336f541e6", "record_id": "flaws_cloudtrail:0000138:75385d-bc8c-4a1f-88b7-cd1336f541e6", "row_index": 138, "timestamp": "2018-04-17T12:12:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75385d-bc8c-4a1f-88b7-cd1336f541e6", "eventTime": "2018-04-17T12:12:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06d2c19c-ee1a-4abf-bb92-ad74c092388b", "record_id": "flaws_cloudtrail:0000139:06d2c19c-ee1a-4abf-bb92-ad74c092388b", "row_index": 139, "timestamp": "2018-04-17T12:12:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06d2c19c-ee1a-4abf-bb92-ad74c092388b", "eventTime": "2018-04-17T12:12:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "857658f5c-b687-4785-850d-413c32c0751c", "record_id": "flaws_cloudtrail:0000140:857658f5c-b687-4785-850d-413c32c0751c", "row_index": 140, "timestamp": "2018-04-17T12:12:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "857658f5c-b687-4785-850d-413c32c0751c", "eventTime": "2018-04-17T12:12:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa49faa3-603e-49a6-ad7f-8b5f96e339b5", "record_id": "flaws_cloudtrail:0000141:aa49faa3-603e-49a6-ad7f-8b5f96e339b5", "row_index": 141, "timestamp": "2018-04-17T12:12:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa49faa3-603e-49a6-ad7f-8b5f96e339b5", "eventTime": "2018-04-17T12:12:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39845cab-90c8-4e65-ab5c-4ad7487e7127", "record_id": "flaws_cloudtrail:0000142:39845cab-90c8-4e65-ab5c-4ad7487e7127", "row_index": 142, "timestamp": "2018-04-17T12:12:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39845cab-90c8-4e65-ab5c-4ad7487e7127", "eventTime": "2018-04-17T12:12:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Y7B45fyF0-4hhbskFSvqvLdgmSPgic6Bp5qQnh9kt2_-zoHRV1e_UDhSSVCujphhD0v5SiNSsL_A9B6LHFGVc0sDYlZ-xv0q33FJD-3r77aW9OU9PAylZaWlfeDWunqrGgYeuG10gO8SbDCHXmrE3SU9S72h0TtgKTHpNXvURpFeMAR76rozDI6TEm-3fExmaQSINFJ0KAXgocEyEmTvBYrvHWIRwaraf6QGtYTEpOFj2wbSOGZZNx6KjPX-s7ascfySH05-Mq1qc0N7slQIqFWo12Ro46Ui8m4HH5I5BLRPNtZqkPmgCA7Tqh697PdM7hNZ5s_nJnKedaiuWTjFyLclkiEVMgNLUXjScgVarP0W1Vb82LSXf0IWhs275_pFVTM-KPW4sCw2Np7-y-am1cgCZ4HdHIaDl7nL806QGaAcxA2d5zx-xJ9a0HA2dU1d8MEcYkpmpLZtlufVUhvP_7wHwUWhB15KYygusfj_fj_V-TZsn6r37QMtZ8AtsCcoIsQUdVdfVI4vhVlQmQcfxtIbqevQUH7pcEHaHqddjVq1ebf6AqsSRE_pZbCJAiCF__rlfDrTYdurcz7-MTBJaU4Qfhmpk3rFH0gmDebuF0967ZZl7_8V71wcSAATwjB5n_E6dgntCMPnio0wsAcqDvMDIIJjog1MCw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9778c29-d716-444c-887e-527b05230400", "record_id": "flaws_cloudtrail:0000143:b9778c29-d716-444c-887e-527b05230400", "row_index": 143, "timestamp": "2018-04-17T12:12:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9778c29-d716-444c-887e-527b05230400", "eventTime": "2018-04-17T12:12:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9229e9b1-3673-4027-a4c3-5b2b53b3e617", "record_id": "flaws_cloudtrail:0000144:9229e9b1-3673-4027-a4c3-5b2b53b3e617", "row_index": 144, "timestamp": "2018-04-17T12:12:47Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9229e9b1-3673-4027-a4c3-5b2b53b3e617", "eventTime": "2018-04-17T12:12:47Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bea228d5-e0ee-4d22-99f7-9a734c25e3b0", "record_id": "flaws_cloudtrail:0000145:bea228d5-e0ee-4d22-99f7-9a734c25e3b0", "row_index": 145, "timestamp": "2018-04-17T12:12:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bea228d5-e0ee-4d22-99f7-9a734c25e3b0", "eventTime": "2018-04-17T12:12:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae2c92b8-cd5e-48c3-a4dd-e9b4a58c1851", "record_id": "flaws_cloudtrail:0000146:ae2c92b8-cd5e-48c3-a4dd-e9b4a58c1851", "row_index": 146, "timestamp": "2018-04-17T12:12:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae2c92b8-cd5e-48c3-a4dd-e9b4a58c1851", "eventTime": "2018-04-17T12:12:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232698b-b5b0-4206-9edb-5e7c606c778a", "record_id": "flaws_cloudtrail:0000147:232698b-b5b0-4206-9edb-5e7c606c778a", "row_index": 147, "timestamp": "2018-04-17T12:12:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232698b-b5b0-4206-9edb-5e7c606c778a", "eventTime": "2018-04-17T12:12:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: eg-CjlWPdct5pUaaRdUdTj0GHx6GYgPcmVaFiuVlD1kONBK-iUq3pE2B2D5bDot-8-WlAs9ABPgdpRRYFOT36G-GwuOeoJzYUY2Mp4-PUXgl1MRsQs4bV3WAdJKHGr1WET2BzpKHIjcbWxt4Va77gVaQbglN_20AZRHYNvYQI39eLVCU6zGh6aizt3WP3Too1XYCWfsBpgnDJryrwpKnNLkQuhQHV0FrRaMUzq7qvxOFxdrsImbyVOPzYx9FyeIR-0AYj1d86Z0UXH9fW7fWZWQ3qCSO8tCxSdl-27bOaM6OF3geL0Swx14Lu1uROrbq89yCvbbJtt4k6y0Z0xrdZV97XatmamtGsWFqcQ-puXFUguXKOqHWoORBYo3iIhe8h0WnRAEnB9EcW6DoOFIWeN7Dkyby11gxju0ePUYVZhOsOA3t8zbcyi0WKp97YEwOkUKN_JvVpgPpo-aK3P2evMVf4VdrR4DKenaAugypJYdzlm5aVefICHVkBuKqbK6xxvSJZlCHLcmrdsc3dnKEUzmIgLhwgTfjWfEgxmePXkiQeaHrjk8UUTs1zHsdBcTy44XdnH8hhi3VbA0c6J-yZwpvLs7UW2NiIrvHLs2qLFI1ZWO8lRfkvdgEiWIK3JudBbqzcRfT5_GQEDsIE27tmfwvYDFW1xRACijlSTuW", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e78a45ad-9c1f-42f3-8ff5-cf3f92ea202a", "record_id": "flaws_cloudtrail:0000148:e78a45ad-9c1f-42f3-8ff5-cf3f92ea202a", "row_index": 148, "timestamp": "2018-04-17T12:12:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e78a45ad-9c1f-42f3-8ff5-cf3f92ea202a", "eventTime": "2018-04-17T12:12:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd5749e-1fe3-4bd5-9ec7-70594f041506", "record_id": "flaws_cloudtrail:0000149:1bd5749e-1fe3-4bd5-9ec7-70594f041506", "row_index": 149, "timestamp": "2018-04-17T12:12:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd5749e-1fe3-4bd5-9ec7-70594f041506", "eventTime": "2018-04-17T12:12:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a10bdc5-102f-487a-b961-337daca4e1a1", "record_id": "flaws_cloudtrail:0000150:8a10bdc5-102f-487a-b961-337daca4e1a1", "row_index": 150, "timestamp": "2018-04-17T12:12:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a10bdc5-102f-487a-b961-337daca4e1a1", "eventTime": "2018-04-17T12:12:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "743d7f04-6f38-41c4-ac9a-2ed633a2b19a", "record_id": "flaws_cloudtrail:0000151:743d7f04-6f38-41c4-ac9a-2ed633a2b19a", "row_index": 151, "timestamp": "2018-04-17T12:12:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "743d7f04-6f38-41c4-ac9a-2ed633a2b19a", "eventTime": "2018-04-17T12:12:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eecb3b6-38cf-486c-95da-3ecc1752fa99", "record_id": "flaws_cloudtrail:0000152:6eecb3b6-38cf-486c-95da-3ecc1752fa99", "row_index": 152, "timestamp": "2018-04-17T12:12:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eecb3b6-38cf-486c-95da-3ecc1752fa99", "eventTime": "2018-04-17T12:12:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a6a0ac6-2abb-4ca3-93df-e14ee5da8a8e", "record_id": "flaws_cloudtrail:0000153:6a6a0ac6-2abb-4ca3-93df-e14ee5da8a8e", "row_index": 153, "timestamp": "2018-04-17T12:12:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a6a0ac6-2abb-4ca3-93df-e14ee5da8a8e", "eventTime": "2018-04-17T12:12:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0f04a9c-42ec-4f96-8112-a638f68b74be", "record_id": "flaws_cloudtrail:0000154:b0f04a9c-42ec-4f96-8112-a638f68b74be", "row_index": 154, "timestamp": "2018-04-17T12:12:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0f04a9c-42ec-4f96-8112-a638f68b74be", "eventTime": "2018-04-17T12:12:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: TjNnkS6N8NZiNmQUlDb3JLqvVFEjVGwwVyOkdLeJoTWfOBBN1IfxDEa_Jgblmt08m_O3558X2AY7OJ7witNB_pcc7upsouhj_gYjm9urBuuixbiXLzoBPiwMplTnnY3mFCoBKH7uMlqC7kPhup_656Hv3Td39wYIli3SIQOheNy6xkhqsZjo9fXV9NLy-HW38oWY1HAU47551wrM7ajbmLXaFsJx7liCh8wpxxQdaJnt5B5x9fGIbHSrOkzj2gTo9l1XNwO0PCxElJsFaodTovotUOptQBO9YigKz7WHk5DBz6cqa5Q5LJxDaopq6nLCT2R2i-t4jTHR856PtY1FqDJCHNG0B9H1-qEcSKebs7cxsmdGZzMy9kHzhrFwgCo53FwNYhrsbOba40x44NZO_hyVeVZaSGAZ-Fur1aZtfLCyzctJSlRWraiQhoXQ9w6-xlfNMKjLaLjIkRA9HPJg3sc5TaJDC1LjkLuxXHl7Xc_9jwspLmZ1fIU4YdvX9UvkeIqxZ1YIhzxLcyEMlsC1zTfqUY2J7xRCLcd8S28uL54F7QDC7vmJWmz57LeABOYLKrEYpHLF5PwEWFLPtRe9Uc8GYfLIwlLP-0X5ZNClF3nrApPlsy4XJpslDvNfXKk-IwsAtO_baPtUCUSfGIlfN-kWzuaqpYzuq29M2INc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23f076e8-7df4-4bbf-ad03-c66bdbdc6c11", "record_id": "flaws_cloudtrail:0000155:23f076e8-7df4-4bbf-ad03-c66bdbdc6c11", "row_index": 155, "timestamp": "2018-04-17T12:12:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23f076e8-7df4-4bbf-ad03-c66bdbdc6c11", "eventTime": "2018-04-17T12:12:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0643f9fe-d2c5-469c-bf10-98a21eb6c938", "record_id": "flaws_cloudtrail:0000156:0643f9fe-d2c5-469c-bf10-98a21eb6c938", "row_index": 156, "timestamp": "2018-04-17T12:12:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0643f9fe-d2c5-469c-bf10-98a21eb6c938", "eventTime": "2018-04-17T12:12:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3e7063-1c16-4231-b2b7-3f232aed0fb3", "record_id": "flaws_cloudtrail:0000157:8d3e7063-1c16-4231-b2b7-3f232aed0fb3", "row_index": 157, "timestamp": "2018-04-17T12:12:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3e7063-1c16-4231-b2b7-3f232aed0fb3", "eventTime": "2018-04-17T12:12:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b1544cd-527c-4976-92c6-27c423f619d4", "record_id": "flaws_cloudtrail:0000158:6b1544cd-527c-4976-92c6-27c423f619d4", "row_index": 158, "timestamp": "2018-04-17T12:12:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b1544cd-527c-4976-92c6-27c423f619d4", "eventTime": "2018-04-17T12:12:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "928e8b2e-e098-48a3-a05b-fa7c9a69a30f", "record_id": "flaws_cloudtrail:0000159:928e8b2e-e098-48a3-a05b-fa7c9a69a30f", "row_index": 159, "timestamp": "2018-04-17T12:12:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "928e8b2e-e098-48a3-a05b-fa7c9a69a30f", "eventTime": "2018-04-17T12:12:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa7b3d3-40d7-4c07-818f-61070a901bd8", "record_id": "flaws_cloudtrail:0000160:0aa7b3d3-40d7-4c07-818f-61070a901bd8", "row_index": 160, "timestamp": "2018-04-17T12:12:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa7b3d3-40d7-4c07-818f-61070a901bd8", "eventTime": "2018-04-17T12:12:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a963472a-dd2f-48c4-b509-07e03c60203", "record_id": "flaws_cloudtrail:0000161:7a963472a-dd2f-48c4-b509-07e03c60203", "row_index": 161, "timestamp": "2018-04-17T12:12:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a963472a-dd2f-48c4-b509-07e03c60203", "eventTime": "2018-04-17T12:12:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dd81440-5163-43a8-a7f4-a33be8d311447", "record_id": "flaws_cloudtrail:0000162:2dd81440-5163-43a8-a7f4-a33be8d311447", "row_index": 162, "timestamp": "2018-04-17T12:12:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dd81440-5163-43a8-a7f4-a33be8d311447", "eventTime": "2018-04-17T12:12:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e285c2-216f-4ac6-9a84-926fafa463f7", "record_id": "flaws_cloudtrail:0000163:31e285c2-216f-4ac6-9a84-926fafa463f7", "row_index": 163, "timestamp": "2018-04-17T12:12:57Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e285c2-216f-4ac6-9a84-926fafa463f7", "eventTime": "2018-04-17T12:12:57Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d3e536-6ab2-4e2b-b333-a2d91210c038", "record_id": "flaws_cloudtrail:0000164:a0d3e536-6ab2-4e2b-b333-a2d91210c038", "row_index": 164, "timestamp": "2018-04-17T12:12:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d3e536-6ab2-4e2b-b333-a2d91210c038", "eventTime": "2018-04-17T12:12:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad51e6c6-7e28-417e-844d-86f0c2c2b132", "record_id": "flaws_cloudtrail:0000165:ad51e6c6-7e28-417e-844d-86f0c2c2b132", "row_index": 165, "timestamp": "2018-04-17T12:12:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad51e6c6-7e28-417e-844d-86f0c2c2b132", "eventTime": "2018-04-17T12:12:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c212992d4-1dea-4bb9-827f-a514de5de275", "record_id": "flaws_cloudtrail:0000166:c212992d4-1dea-4bb9-827f-a514de5de275", "row_index": 166, "timestamp": "2018-04-17T12:12:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c212992d4-1dea-4bb9-827f-a514de5de275", "eventTime": "2018-04-17T12:12:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: pJduw-48oyqbcVzoSd7wqfrK6NwqE44tyjE858C-JcKs1gf9MLfrGVeQ8UGla26I4rf6wCzwGYRECIe2ay6_lch6ZtNNl22Bn8DBOFnT_tGLv9fWlXg4OOmRj01oy2enFg8SH_-ct93oLw46XVWf2CM3dvSycCMOezpWifE4Zh4vfBm9Azv7RGeltfcqDLrBLYCCG6XheMFL4-XfBsGGRWczo9SIvMcC-ZoIScEWyKzHNPB5I5mjVW4F8Opy--RoMg6Hl33FcxctPofUEc7a7LCVUVcOqr_BHRMjjVPsIdV1T8_H-2tMAE-SAnCSoPCigpLRuDUiWAloVI8etYTzlXz7l-n3NbmZ3z4qANIq-z4qp-3pQgCOg_7e4tR3X9_8JsujDCnAAANc-qnK2C_ILp8o88gywi6csPmqkwh5yRT4Grk74qZ-n-h6uPIwkNIlx0TpkdRzFh2thEVxOZae6RMYh4uEQC6LY0yCViWafSm1xR04NPOINnRYQ2_zj-5sLDkTpx4TwtPC4UNf-RQhnXvN9Xyqp4lGsSK4ll_of1qy8vXDN-JrbBRJLfKiEks_i3ChuZPtfHeKwAv76HHbENimCuOO1NskK18Rbr0EocBsFjDqq0J5C6ywkx5muadc-eSzh1KQ-5aH25TYYodeHLNYozQ9B9_o3Rjb4w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd81ea24-423a-461a-8778-60aa7b2b0426", "record_id": "flaws_cloudtrail:0000167:bd81ea24-423a-461a-8778-60aa7b2b0426", "row_index": 167, "timestamp": "2018-04-17T12:12:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd81ea24-423a-461a-8778-60aa7b2b0426", "eventTime": "2018-04-17T12:12:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YgIBCeX3cuT7BdCaOm12YLHfjr7KMSa6jdVOiOnR0cNgyTxn8IQD07WDNEikX24CyeDX7OBsCiLSLy8xA06zBFauu_UFfQ4EH4DBlRzNM30M0X32QvFZBlRTaZy6yTwzokngBqCI-2iPHBvnNTKMW2WvZTlGPZNEFGGlqRuj70baMYcdc7_5ykcJ9Umg-v79O7o1D-X7uJWMRBiit1bB-Ufb87vHjBgx_mCmfz9v2ErPtPFTtFmCKwiEhvCfysJHBruldCbDwMsHlm0pnkN2azE284aTudCgVmOrSx6Dekh8BBQowRRzyHweOGro1DW1FPSmPExNYYw0T3QM4mcNiCRDdH2uu2uFWc7VbvTH7wjGdioGiOXNEugvnVJypSysXeNjw-qMI0YSzSP8qQ7uoQHXIF844b0tcxg2-uuf_VeqTAEfgpcLawwcyw1CYAO2jxwZFClPSw4EQ1jF1jbSGSYK_5mmQR86KBhU5ukaC9uB8RUsW6aBBa8cxHwUjkEZkwvsGIiA86akU1JO1r39IfIuful5JtGW1Epow1T9OzZ5sxdDfL1vR-UPFda_tgvA6tp8AVCjtrZfw4FBbofSXpVdyFZvL-uoexZYEU4yR6JE6sK_UrQem1Fy-8sz3UoweHL7kTpA0AbdzgYyafufDm9yF-axRVyLWw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8fabc82-9e7e-4be5-a58f-b0ec5e5f6f6a", "record_id": "flaws_cloudtrail:0000168:c8fabc82-9e7e-4be5-a58f-b0ec5e5f6f6a", "row_index": 168, "timestamp": "2018-04-17T12:13:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8fabc82-9e7e-4be5-a58f-b0ec5e5f6f6a", "eventTime": "2018-04-17T12:13:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c04e1a8-2910-49ee-a2f0-fe6f39e72e2e", "record_id": "flaws_cloudtrail:0000169:1c04e1a8-2910-49ee-a2f0-fe6f39e72e2e", "row_index": 169, "timestamp": "2018-04-17T12:13:01Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c04e1a8-2910-49ee-a2f0-fe6f39e72e2e", "eventTime": "2018-04-17T12:13:01Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fa85904-4413-450c-8f30-ec7f64c172106", "record_id": "flaws_cloudtrail:0000170:1fa85904-4413-450c-8f30-ec7f64c172106", "row_index": 170, "timestamp": "2018-04-17T12:13:01Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fa85904-4413-450c-8f30-ec7f64c172106", "eventTime": "2018-04-17T12:13:01Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea82af24-308a-4f36-aa8c-f05a071cb42f", "record_id": "flaws_cloudtrail:0000171:ea82af24-308a-4f36-aa8c-f05a071cb42f", "row_index": 171, "timestamp": "2018-04-17T12:13:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea82af24-308a-4f36-aa8c-f05a071cb42f", "eventTime": "2018-04-17T12:13:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a5ba3ae-fc8c-47e7-b525-530e01d79e30", "record_id": "flaws_cloudtrail:0000172:3a5ba3ae-fc8c-47e7-b525-530e01d79e30", "row_index": 172, "timestamp": "2018-04-17T12:13:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a5ba3ae-fc8c-47e7-b525-530e01d79e30", "eventTime": "2018-04-17T12:13:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d060279f5-3b9a-4bb0-8c91-9f05e29ea9f1", "record_id": "flaws_cloudtrail:0000173:d060279f5-3b9a-4bb0-8c91-9f05e29ea9f1", "row_index": 173, "timestamp": "2018-04-17T12:13:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d060279f5-3b9a-4bb0-8c91-9f05e29ea9f1", "eventTime": "2018-04-17T12:13:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7f983bc-2a8a-47a9-8f0e-8e1ee26e4bda", "record_id": "flaws_cloudtrail:0000174:e7f983bc-2a8a-47a9-8f0e-8e1ee26e4bda", "row_index": 174, "timestamp": "2018-04-17T12:13:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7f983bc-2a8a-47a9-8f0e-8e1ee26e4bda", "eventTime": "2018-04-17T12:13:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de2b52e-d96b-4403-a120-5e57fd9d6fe5", "record_id": "flaws_cloudtrail:0000175:8de2b52e-d96b-4403-a120-5e57fd9d6fe5", "row_index": 175, "timestamp": "2018-04-17T12:13:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de2b52e-d96b-4403-a120-5e57fd9d6fe5", "eventTime": "2018-04-17T12:13:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd3a850-0208-41e6-a56b-ea772f947ba2", "record_id": "flaws_cloudtrail:0000176:bcd3a850-0208-41e6-a56b-ea772f947ba2", "row_index": 176, "timestamp": "2018-04-17T12:13:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd3a850-0208-41e6-a56b-ea772f947ba2", "eventTime": "2018-04-17T12:13:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3382af-db1a-453c-b6d8-bf4c1ed1aee8", "record_id": "flaws_cloudtrail:0000177:ba3382af-db1a-453c-b6d8-bf4c1ed1aee8", "row_index": 177, "timestamp": "2018-04-17T12:13:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3382af-db1a-453c-b6d8-bf4c1ed1aee8", "eventTime": "2018-04-17T12:13:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "befde231-d577-404b-8c11-e35f1ea8dfe7", "record_id": "flaws_cloudtrail:0000178:befde231-d577-404b-8c11-e35f1ea8dfe7", "row_index": 178, "timestamp": "2018-04-17T12:13:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "befde231-d577-404b-8c11-e35f1ea8dfe7", "eventTime": "2018-04-17T12:13:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "737b9954-bc91-4b89-ad4d-fd4e608c1773", "record_id": "flaws_cloudtrail:0000179:737b9954-bc91-4b89-ad4d-fd4e608c1773", "row_index": 179, "timestamp": "2018-04-17T12:13:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "737b9954-bc91-4b89-ad4d-fd4e608c1773", "eventTime": "2018-04-17T12:13:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MZBuGdFtEe1ffHENF5GP_o6wHRcHLKpl71gR3b258m9pXeYxI6CuxV1znfJzzp3UnovvJXBE-YXrr2Eg4KqzzmyMHgj9zTHE7tvPw42RDQUq7Iuexo4CtHCZhnIsDFHqymOhP9Gt4e5_TqrO74pm5CXWBC14O60neokylERwO84cjYHhRHBHN95HyUlXVBnPI2fbj2BPEfNNU2Yh6iWRaURTUzAgGehQcxT-5HwUyFmVsduzRPNtoUbLrVIZICHxfX_wZuo0nJ0QW9fxbsacljl1Yqtrcatu6Q7q3ZBG3GSMCb_bGA4VdkX5-BjRgQ83G8fmiAuYy_uTUrREKrKb3D6dBpAnEHkbfNr8vFFCiQgyb5ucdUW7GCX9R2y1gXH3YPYFgxrhmI97orCOjKQoBEWwqE1jgM47_exYilIs66nDnXafeUEAbopL6wuuC_aZMUTOOFr0uK2dHRVu5ojH2te8Lo639ZYwTaTRXUBR2MFnGmGPT4LOtipnvWuOdxd0JvCe_aCDA79us8gKQ9EDQjawBQMwTCW16-XOjjoPFReN0vkmnEO7wKNUwWGVs2doBp6J3_PhQ6SIBpeyoa6pytvYlfRKKZQ94XXHV_MG6frwoqETQGiDN-D5FJlRZ_Ffm6up9cZZeqUzNzOtMnj6dpZ9CfLtrrknoWNGujU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb86603-958a-419b-ae67-c5d21ec30991", "record_id": "flaws_cloudtrail:0000180:eb86603-958a-419b-ae67-c5d21ec30991", "row_index": 180, "timestamp": "2018-04-17T12:13:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb86603-958a-419b-ae67-c5d21ec30991", "eventTime": "2018-04-17T12:13:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aba7ef84-d4ce-4400-bcf4-6dec6a4fcb93", "record_id": "flaws_cloudtrail:0000181:aba7ef84-d4ce-4400-bcf4-6dec6a4fcb93", "row_index": 181, "timestamp": "2018-04-17T12:13:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aba7ef84-d4ce-4400-bcf4-6dec6a4fcb93", "eventTime": "2018-04-17T12:13:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "141560f4-e5a9-4212-8514-0b98093f16", "record_id": "flaws_cloudtrail:0000182:141560f4-e5a9-4212-8514-0b98093f16", "row_index": 182, "timestamp": "2018-04-17T12:13:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1272, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "141560f4-e5a9-4212-8514-0b98093f16", "eventTime": "2018-04-17T12:13:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa7d5b13-8a83-4831-b020-a5db316289c6f", "record_id": "flaws_cloudtrail:0000183:fa7d5b13-8a83-4831-b020-a5db316289c6f", "row_index": 183, "timestamp": "2018-04-17T12:13:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa7d5b13-8a83-4831-b020-a5db316289c6f", "eventTime": "2018-04-17T12:13:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c000056f-8f7f-43b3-9985-e4dd05cb2652", "record_id": "flaws_cloudtrail:0000184:c000056f-8f7f-43b3-9985-e4dd05cb2652", "row_index": 184, "timestamp": "2018-04-17T12:13:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c000056f-8f7f-43b3-9985-e4dd05cb2652", "eventTime": "2018-04-17T12:13:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd1877a-ffe9-421b-8d56-066ebd20c943", "record_id": "flaws_cloudtrail:0000185:dcd1877a-ffe9-421b-8d56-066ebd20c943", "row_index": 185, "timestamp": "2018-04-17T12:13:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd1877a-ffe9-421b-8d56-066ebd20c943", "eventTime": "2018-04-17T12:13:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbea2ca6-b216-4a2e-a8d5-f0a46e631f5e", "record_id": "flaws_cloudtrail:0000186:dbea2ca6-b216-4a2e-a8d5-f0a46e631f5e", "row_index": 186, "timestamp": "2018-04-17T12:13:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbea2ca6-b216-4a2e-a8d5-f0a46e631f5e", "eventTime": "2018-04-17T12:13:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: s_rlVtTXYrN0RK342Wb7gOpl7q8__Hj4D0tRdDRThDW0ElnTPYNNZVHOwETDqwl4SXHQXMnsD6bIRKOvHJUa6wSyGxlpJi6YsOxQUsYIUME8yWDl21tfb1yWH99s-jCfb4ZGZa8r2IOGyXbhtRRPdW3k5RnVfyv6YoDfzyt3jS7vBmKpvIWsoyumIxokimegahMfdyKMaE30F6JOLxQZtddkrMuHRem7S92DQ1wdSZu48Etg34vFuDwSuyY99rBZPBQQV5dFkqzqY-5pk9_0QaaTpDRbNDNy3vxNVaFCKJSN3vc1EedDQh9MkBMdqDD8yaPKpbEoqk2wDiiyYcAjJZRWNYjAMZFLh7DqdaP414nFSOf06evEh2vd0hUlbpUgGz0XgrUH2FM3vrK7WBWfvcwHmbs-FbeArkv6ZN_gHWaWvUeIlmXwe59ZdvDxnizUZ8d7UizfigtKIHfGRXFIlokkt2KvqtGNEUS5acilt2uvpYfJ0aM0rkVbRxPCstKs5qQ5KgMB6TKdt2H415cKIpSdIl7aCh7uM5l6UwxKIX8g3h8m0nGXoAh5fN9RYDFGoKIXGHal4HcoMFrc9zPjEsjFRSFalcT5v3hrsh6pw21PDAiEeEmGyrjDc6oNNXfZV1Ld2iIt2ZU9pbtZ-hgGDSiVi3mmnfFc8zgWXMA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cbd0785-1254-443e-8705-43baad2305c2", "record_id": "flaws_cloudtrail:0000187:9cbd0785-1254-443e-8705-43baad2305c2", "row_index": 187, "timestamp": "2018-04-17T12:13:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cbd0785-1254-443e-8705-43baad2305c2", "eventTime": "2018-04-17T12:13:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f61969-05f4-4b81-a31d-12de5fa4d97e", "record_id": "flaws_cloudtrail:0000188:f61969-05f4-4b81-a31d-12de5fa4d97e", "row_index": 188, "timestamp": "2018-04-17T12:13:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f61969-05f4-4b81-a31d-12de5fa4d97e", "eventTime": "2018-04-17T12:13:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a481ff7-ea98-458b-b25e-d875d7903932", "record_id": "flaws_cloudtrail:0000189:9a481ff7-ea98-458b-b25e-d875d7903932", "row_index": 189, "timestamp": "2018-04-17T12:13:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a481ff7-ea98-458b-b25e-d875d7903932", "eventTime": "2018-04-17T12:13:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac1b4068-89a1-46be-8d77-58efcffbde5e", "record_id": "flaws_cloudtrail:0000190:ac1b4068-89a1-46be-8d77-58efcffbde5e", "row_index": 190, "timestamp": "2018-04-17T12:13:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac1b4068-89a1-46be-8d77-58efcffbde5e", "eventTime": "2018-04-17T12:13:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbb85b5-3382-42ec-bdb2-6fead17c3e4a", "record_id": "flaws_cloudtrail:0000191:cdbb85b5-3382-42ec-bdb2-6fead17c3e4a", "row_index": 191, "timestamp": "2018-04-17T12:13:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbb85b5-3382-42ec-bdb2-6fead17c3e4a", "eventTime": "2018-04-17T12:13:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db064cea-549b-40d1-aa14-470df7a7b848", "record_id": "flaws_cloudtrail:0000192:db064cea-549b-40d1-aa14-470df7a7b848", "row_index": 192, "timestamp": "2018-04-17T12:13:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1929, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db064cea-549b-40d1-aa14-470df7a7b848", "eventTime": "2018-04-17T12:13:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: O8-IrPBHQ_bSaDiLPKQa80DT5bdsousyzHNx3ksOBVwCpsMx1D09h6c_zxeNOKkcaaFVGtuLDLXKCRLaB-DfhlHxhhoaWeUoxrmhTCB_n-xMeDS4PH3SylYR3zv6esJcFteM98PtUfOVdLyDxbD1J69Zj7H2Mlc4qmuANL2AHPwAPM1R9AgoaDuOKxkKhaoG09diJmtyZMuLP0TOH1uGn3lkqi66TbWUiXc3olH2TikgHF4XayUyJm-gLbfRQilZiLe43-bcAsK0r5g71h-OG0p6mhedmXknBIpZKjuGVpMaYUMlHKdsnmhjGsSOv4imJQH0P7GlxwOaIt7RgfxiAIvqJrlMzdiizKOTzUI7itvEhajzQDlz_D9IAEP1IkPSDkAAmZdJlCysfb18rmxpguNlkSTR-F1JNjy5T61_fRjmZM7QE3NsXxlvpQJTMDpnsLOi8NWYVfpJEs9E4n2mCZaCMfbbbkJf3t-GOwyVduOEiORxM0PmbdAJIvNJuUywyeS_XzIn2hK3RfIuiOitRdYtPtXWNH7gGZXXKWiWNF16Jfk8jrNpLWcM58XLkhrhvr2QwgTLED4sl4harqhczvEL-Tc3nAV3f2ZnW1l3Qp3cdIQEfO6r_zzcR6Ky2QQI7K5b0Ek6qWc9VZtU0A5x7SBId-RRK81FY5w5", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2936c7e6-84e8-4ae0-ab03-d4dd389c5006", "record_id": "flaws_cloudtrail:0000193:2936c7e6-84e8-4ae0-ab03-d4dd389c5006", "row_index": 193, "timestamp": "2018-04-17T12:13:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2936c7e6-84e8-4ae0-ab03-d4dd389c5006", "eventTime": "2018-04-17T12:13:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "251267eb-9944-42be-adba-b57612f3579f", "record_id": "flaws_cloudtrail:0000194:251267eb-9944-42be-adba-b57612f3579f", "row_index": 194, "timestamp": "2018-04-17T12:13:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "251267eb-9944-42be-adba-b57612f3579f", "eventTime": "2018-04-17T12:13:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b67a4820-1845-4eb9-9aeb-c7b3b885f17e", "record_id": "flaws_cloudtrail:0000195:b67a4820-1845-4eb9-9aeb-c7b3b885f17e", "row_index": 195, "timestamp": "2018-04-17T12:13:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b67a4820-1845-4eb9-9aeb-c7b3b885f17e", "eventTime": "2018-04-17T12:13:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfa351d1-742b-452c-ad56-176dd1390dd4", "record_id": "flaws_cloudtrail:0000196:dfa351d1-742b-452c-ad56-176dd1390dd4", "row_index": 196, "timestamp": "2018-04-17T12:13:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfa351d1-742b-452c-ad56-176dd1390dd4", "eventTime": "2018-04-17T12:13:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f594447-77b2-4968-9003-c9584fa069cd", "record_id": "flaws_cloudtrail:0000197:5f594447-77b2-4968-9003-c9584fa069cd", "row_index": 197, "timestamp": "2018-04-17T12:13:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f594447-77b2-4968-9003-c9584fa069cd", "eventTime": "2018-04-17T12:13:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8858ecd1-ec40-4342-87b2-a77f2285e7bf", "record_id": "flaws_cloudtrail:0000198:8858ecd1-ec40-4342-87b2-a77f2285e7bf", "row_index": 198, "timestamp": "2018-04-17T12:13:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8858ecd1-ec40-4342-87b2-a77f2285e7bf", "eventTime": "2018-04-17T12:13:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76eb70c-d071-4076-afb9-26aa11f290406", "record_id": "flaws_cloudtrail:0000199:a76eb70c-d071-4076-afb9-26aa11f290406", "row_index": 199, "timestamp": "2018-04-17T12:13:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76eb70c-d071-4076-afb9-26aa11f290406", "eventTime": "2018-04-17T12:13:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40bee110-bfd2-4c1e-9664-f7436f9acbbf", "record_id": "flaws_cloudtrail:0000200:40bee110-bfd2-4c1e-9664-f7436f9acbbf", "row_index": 200, "timestamp": "2018-04-17T12:13:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40bee110-bfd2-4c1e-9664-f7436f9acbbf", "eventTime": "2018-04-17T12:13:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a246ec3a-0730-484f-9ff7-bb60acd2b219", "record_id": "flaws_cloudtrail:0000201:a246ec3a-0730-484f-9ff7-bb60acd2b219", "row_index": 201, "timestamp": "2018-04-17T12:13:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a246ec3a-0730-484f-9ff7-bb60acd2b219", "eventTime": "2018-04-17T12:13:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42c966bc-2655-4879-81a8-236761c6631", "record_id": "flaws_cloudtrail:0000202:42c966bc-2655-4879-81a8-236761c6631", "row_index": 202, "timestamp": "2018-04-17T12:13:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42c966bc-2655-4879-81a8-236761c6631", "eventTime": "2018-04-17T12:13:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b50046-ce14-4111-af39-2b05fe5a1f3b", "record_id": "flaws_cloudtrail:0000203:3b50046-ce14-4111-af39-2b05fe5a1f3b", "row_index": 203, "timestamp": "2018-04-17T12:13:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b50046-ce14-4111-af39-2b05fe5a1f3b", "eventTime": "2018-04-17T12:13:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01c931c6-e4b2-4983-bfbf-d374c8c600d0", "record_id": "flaws_cloudtrail:0000204:01c931c6-e4b2-4983-bfbf-d374c8c600d0", "row_index": 204, "timestamp": "2018-04-17T12:13:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01c931c6-e4b2-4983-bfbf-d374c8c600d0", "eventTime": "2018-04-17T12:13:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c682f8a-7092-4c0c-b79b-de6d2a1b497a", "record_id": "flaws_cloudtrail:0000205:9c682f8a-7092-4c0c-b79b-de6d2a1b497a", "row_index": 205, "timestamp": "2018-04-17T12:13:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c682f8a-7092-4c0c-b79b-de6d2a1b497a", "eventTime": "2018-04-17T12:13:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a03ebb0e-de78-4652-af4a-829f623e2255", "record_id": "flaws_cloudtrail:0000206:a03ebb0e-de78-4652-af4a-829f623e2255", "row_index": 206, "timestamp": "2018-04-17T12:13:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a03ebb0e-de78-4652-af4a-829f623e2255", "eventTime": "2018-04-17T12:13:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jBRt9n2hoyYxdhQrPf45Cup_zoH1yBKGoVcxNtj2ttv2YMM8GkWUJCmZUu2ZIpcgxkkeKIYEuvJ6GCMFABjqU_CSXGoukh9NUYdeht-id70QKe06qeAMjAsyx0lgFcFzn_js5hRGq101Km75MqE-Gg9iVg4OP--_1J70-4v3lcUG7D-2GlE8oITxjmm9W-mKUMdaLN8QNG2NS49MIODOmToGgjOAfEfLUIkj_IDSTsBPg5fcYnvCFKX3qxslT3s7i8_enL68SwHXKcBt1-NSAsKmBPP0ZFxYOaq6mI0W4_X9CB46GRvMuePVuB9rfyjQxCwkGdR5-NuyVAopv8RHSnI87XZNGY4jqa45JkDZra0593lrVt3lN0eKR0NyZTUQ_WXxaURix-8olucUKv6nxI-sYFzkfnFnv4eH4p_xOhXI07wkJL-ATNZLm6giLIOZFcEFw0D0SQmM0lIOfH4Mt4rm5vRY9jJbBSY75FPHtpp1F-B23SafudBhIoI83e7AmhHfRhGYDKFUAjK5sWrpFI882QSR5ltlwayiUbtpaH-Da0tySENamB3ZTptmMLTmHfVuZ2WwgxB3vMVKha1UCr3UEuEQX-E3rofe9IY0iEmkEck4XKSkIYXwXnfJ9duzB-Pza8wytfY-kKkJAgOgGtu5n8TRQwLPafQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "418131a93-76ab-4519-b927-771dd944dc93", "record_id": "flaws_cloudtrail:0000207:418131a93-76ab-4519-b927-771dd944dc93", "row_index": 207, "timestamp": "2018-04-17T12:13:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "418131a93-76ab-4519-b927-771dd944dc93", "eventTime": "2018-04-17T12:13:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb0c971-dd9b-4706-a340-d7954baa4ada", "record_id": "flaws_cloudtrail:0000208:cfb0c971-dd9b-4706-a340-d7954baa4ada", "row_index": 208, "timestamp": "2018-04-17T12:13:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb0c971-dd9b-4706-a340-d7954baa4ada", "eventTime": "2018-04-17T12:13:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5e764a4-6a54-4668-a51b-b74b0ff4db1b", "record_id": "flaws_cloudtrail:0000209:b5e764a4-6a54-4668-a51b-b74b0ff4db1b", "row_index": 209, "timestamp": "2018-04-17T12:13:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5e764a4-6a54-4668-a51b-b74b0ff4db1b", "eventTime": "2018-04-17T12:13:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5742b54b-3742-4810-8f2b-92fa1c356634", "record_id": "flaws_cloudtrail:0000210:5742b54b-3742-4810-8f2b-92fa1c356634", "row_index": 210, "timestamp": "2018-04-17T12:13:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1930, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5742b54b-3742-4810-8f2b-92fa1c356634", "eventTime": "2018-04-17T12:13:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fsKICt3my6HDmQnZ4L0mzEYDhp82-kI3R3qTCH_3sJP8CflguzPt7fVLDhols2vKyQqX1gaay17o8YojdaEzl-9oqDmLz9kINRBwz2vCRqFTkBs0L5morAILYZidtI8masT3W2JPKWF_wDQzktBcLnSsHIYSNL8DufyNrY9Q2MEZTgrynX368TeNmIGXdKk7fIABLdsLWFORUSgZEcHlxkRZvnZFZT4pa_FsyU4dW1Ztvyl75hWXT0ANoAOcEeKlJf_jYfaU4kZlsoyp8c7MRVap33BcwLg5vJGsaltS5VOiWrQNG2pLaXQKOfR0IDUifRflza9TgTzt0W3fzkAyHYhFyMy3_oXX_aTK8h6NLKeAsJG0lebUsgLfDulmlkZPDi0SgOmILNbUNPD4ESzq4F1WkgyOdlA2RLtmIhi7XtAPFuLtLcUy67LrIt9rD57qTkOZSx_IkDEjH8F3Vt_V1C0K30JVrr9BjbIVrl0LxjvhAv3Q_779BEhENCNAMdmPoQlc0p-bZzAVuCbViGrl7bt0RnM1etMeFYoToGqAQfplM0ya3MXCfuLhwye8_Qw_73u2lNN1M8R2OXSPeUMlKpDik51jfo5O5D1mB0nqoBsfzOau-iyNKI61WaEu69aoT5gfU-kdEfRenXqPNwMOw0S-mug1PXTPUIJV", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b18a63-04c7-4dab-a3fe-e5abd8b6c248", "record_id": "flaws_cloudtrail:0000211:70b18a63-04c7-4dab-a3fe-e5abd8b6c248", "row_index": 211, "timestamp": "2018-04-17T12:13:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b18a63-04c7-4dab-a3fe-e5abd8b6c248", "eventTime": "2018-04-17T12:13:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13119f-c03f-4d4a-887c-0290133b9cd2", "record_id": "flaws_cloudtrail:0000212:13119f-c03f-4d4a-887c-0290133b9cd2", "row_index": 212, "timestamp": "2018-04-17T12:13:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13119f-c03f-4d4a-887c-0290133b9cd2", "eventTime": "2018-04-17T12:13:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d98d99c0-ea0b-4856-b154-4b2f8cb302fd", "record_id": "flaws_cloudtrail:0000213:d98d99c0-ea0b-4856-b154-4b2f8cb302fd", "row_index": 213, "timestamp": "2018-04-17T12:13:21Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d98d99c0-ea0b-4856-b154-4b2f8cb302fd", "eventTime": "2018-04-17T12:13:21Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f825ac42-6c39-4d8a-aa42-78f4799e39cc", "record_id": "flaws_cloudtrail:0000214:f825ac42-6c39-4d8a-aa42-78f4799e39cc", "row_index": 214, "timestamp": "2018-04-17T12:13:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f825ac42-6c39-4d8a-aa42-78f4799e39cc", "eventTime": "2018-04-17T12:13:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: evvtquom8p6a4ox5I5mJQFgcQ-fu_Y60b9WPCaBmyE0cMmFWkazr4anSS-BArgfMdipSXJLDCfAdZRHpgeW1Xq5eaM9K909Kr540NjyjSW5ZndcwxcB9rmgvk2q1a3yES5zdf-C1lexrmUxzFLs_Uf34vKbwSQQVBWmz13gd00TSsEtB0LlEi2A9bOD-2gAH3E3zj9pBUnTFNNQR7zvIh2R0By6MFzQaX4pOMVEyHZppvetw3Jakc9BHypq-ejK-kK7VE7zkpoEVyvrL6RezJKYTvceVVt1msq2oIUQptJW0nrxdfkNm_8XnSWTDeMeNMYsPyCHZQ6YpykQvQK43twBPZczWH5MySjczwy4KYOjlVwpHyFmoijirSc-SSb3wpGqjQIevnAGWEDqygnpPPijigSgXER6DL8jk7oWI-go_6FIJH53umQenVwG_hkznQKg-gvDip3DR8T9h1Wfq2TAhbn_WXxOfkMQANk8Gm8ZfVLYJ1sG6OxPPghdCVeccR27xSDESRj_Ph4rBkfxxwKHD58fsf4wUgoPWftKFzNX6puh7uAWVakR1297oN7L99-2GZB4aBw0YHP8uv1Zy182UONCwG-owILi7ReVkFB_caEYMS3iMUbQzvIr__7STmvwP9sXnPbj3ZauC2owwNo1vUjpAlrysKg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120829aa-64a0-4f37-87e0-0b42119af39f", "record_id": "flaws_cloudtrail:0000215:120829aa-64a0-4f37-87e0-0b42119af39f", "row_index": 215, "timestamp": "2018-04-17T12:13:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120829aa-64a0-4f37-87e0-0b42119af39f", "eventTime": "2018-04-17T12:13:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33d4f60b-2dfe-4c2f-a273-6e3c0994ecb3", "record_id": "flaws_cloudtrail:0000216:33d4f60b-2dfe-4c2f-a273-6e3c0994ecb3", "row_index": 216, "timestamp": "2018-04-17T12:13:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33d4f60b-2dfe-4c2f-a273-6e3c0994ecb3", "eventTime": "2018-04-17T12:13:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "528678-9a60-488f-b857-00292fa565", "record_id": "flaws_cloudtrail:0000217:528678-9a60-488f-b857-00292fa565", "row_index": 217, "timestamp": "2018-04-17T12:13:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1372, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "528678-9a60-488f-b857-00292fa565", "eventTime": "2018-04-17T12:13:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a3480d-e4be-4b85-b427-9e8b663864e7", "record_id": "flaws_cloudtrail:0000218:83a3480d-e4be-4b85-b427-9e8b663864e7", "row_index": 218, "timestamp": "2018-04-17T12:13:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a3480d-e4be-4b85-b427-9e8b663864e7", "eventTime": "2018-04-17T12:13:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c91fe803-f456-4368-b4e6-ad868c631579", "record_id": "flaws_cloudtrail:0000219:c91fe803-f456-4368-b4e6-ad868c631579", "row_index": 219, "timestamp": "2018-04-17T12:13:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c91fe803-f456-4368-b4e6-ad868c631579", "eventTime": "2018-04-17T12:13:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ee6f464-e164-4535-93eb-a2c5f4356f00", "record_id": "flaws_cloudtrail:0000220:6ee6f464-e164-4535-93eb-a2c5f4356f00", "row_index": 220, "timestamp": "2018-04-17T12:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ee6f464-e164-4535-93eb-a2c5f4356f00", "eventTime": "2018-04-17T12:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4e031f6-e5f3-4ad0-832f-7e34633344a5", "record_id": "flaws_cloudtrail:0000221:b4e031f6-e5f3-4ad0-832f-7e34633344a5", "row_index": 221, "timestamp": "2018-04-17T12:13:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4e031f6-e5f3-4ad0-832f-7e34633344a5", "eventTime": "2018-04-17T12:13:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95a61e25-b98a-42cb-a68b-82ec0777ac24", "record_id": "flaws_cloudtrail:0000222:95a61e25-b98a-42cb-a68b-82ec0777ac24", "row_index": 222, "timestamp": "2018-04-17T12:13:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95a61e25-b98a-42cb-a68b-82ec0777ac24", "eventTime": "2018-04-17T12:13:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b952271a-12bf-4049-90a7-961d594408", "record_id": "flaws_cloudtrail:0000223:7b952271a-12bf-4049-90a7-961d594408", "row_index": 223, "timestamp": "2018-04-17T12:13:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b952271a-12bf-4049-90a7-961d594408", "eventTime": "2018-04-17T12:13:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "256327-0a71-4d08-8d99-7ee2f07ffad4", "record_id": "flaws_cloudtrail:0000224:256327-0a71-4d08-8d99-7ee2f07ffad4", "row_index": 224, "timestamp": "2018-04-17T12:13:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "256327-0a71-4d08-8d99-7ee2f07ffad4", "eventTime": "2018-04-17T12:13:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MZlV0oKZ-eCOWUbLK4-x-knuqjNYlusyl2VB-PjcCHXt6X9ayLHYOoRPRLS3CmPEVakgArILZq5AbjPFvD-88RjlhXbYrYaEX18AaVOZpVNwRlYtawJh96_b_GF4vOU5CJ72zgdmPkHdJH5YIEZ7gGG6gFfpgr3xhGiJD6qhlKIuYjKQtlTmOdJeneCj-nbH3W3a5S-f8tXXz20H32yJYcwxmWQpE_zaFy1V4tt7MYJkzC8S6bnUL-qxQihCJ_6_S6_oKDXWd2M0PS46uiSTCRrN3eGKOWThYK3CJ738-4ek5KRoDHjDI8-jdkecgyolnAdGuepNBMoFg7tpG1TmSZa4QSBrZss3CwBZ0GMl-UziI11V2Z3qLBnYEKunthYpXpcievkz6cGlzZ5pcpVGjrhN9YJEWx4ombXLXMXf2LjZb6LtLotzqIBuYmxFxsO-s7u9bI-34wkovkFkOZOFbc8qu1VpKocQeZWFXkuqeUuanVoOQmP4zhLwObrJnLAuZ3OJq6uNzrcA0S6FvByc9FkXdb5th1_EWF7uB6GiXoE9wWZ0M3M5CQUtt74TRTHGy1omsU4Ee9TZyOvepOUxG1UioSfWi8rLrP8p5_nSEf15KDHX1Fe2_Whgh43NDk46p3EQ1sVKizdQxOCOFT-zZX3xayGybiyD3A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca16e044-c659-46f2-a0b3-58aa8c0b8ba3", "record_id": "flaws_cloudtrail:0000225:ca16e044-c659-46f2-a0b3-58aa8c0b8ba3", "row_index": 225, "timestamp": "2018-04-17T12:13:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca16e044-c659-46f2-a0b3-58aa8c0b8ba3", "eventTime": "2018-04-17T12:13:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa871d1-e41f-48bb-874a-1736f5770967", "record_id": "flaws_cloudtrail:0000226:6fa871d1-e41f-48bb-874a-1736f5770967", "row_index": 226, "timestamp": "2018-04-17T12:13:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa871d1-e41f-48bb-874a-1736f5770967", "eventTime": "2018-04-17T12:13:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb2ad70-17a5-4960-b9b8-9cdb36bd67d7", "record_id": "flaws_cloudtrail:0000227:cfb2ad70-17a5-4960-b9b8-9cdb36bd67d7", "row_index": 227, "timestamp": "2018-04-17T12:13:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb2ad70-17a5-4960-b9b8-9cdb36bd67d7", "eventTime": "2018-04-17T12:13:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ab84b1-b86a-476b-a634-f39f39afccd2", "record_id": "flaws_cloudtrail:0000228:96ab84b1-b86a-476b-a634-f39f39afccd2", "row_index": 228, "timestamp": "2018-04-17T12:13:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ab84b1-b86a-476b-a634-f39f39afccd2", "eventTime": "2018-04-17T12:13:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HQ3D8TD3padrz2Vqc66o7bfN20O6jBy1gNA0YV6f7j_dy9NykxLuQ_Y8jn5VkneHBeV4cqaZi5znu5-0vkOwhD372UsAhWBdLXcEfYw8NmFx92rqVOW2FXctrHd7-yPftcgLFAeLe3hB9qn2ULg2xKMypN4K703lJBCbdwPETdv5YlnaPkHHmZeZfoHyGAfx6RgfgiZjm5cYmd_fX_vMn9R-wEfwM7HsPzVkUGz6JaqqiJgiIyNDNHYAZjxvPJrZrLro1YLFlx3AaJfKs2xJOtNhtGj0komz2hQ0OhYYMeWMgFeubreDLCMmj-Yw_9F4EXzf2zgjFsRzA0VIysVFVGOX4yATGLjPGx4-0WhzZTrg0NkdoU2Rbhpinu4NzbEApNf1bAwJFDVC_GkVDG6YIcSypyx6VQV1j12P48Z7E6BhoSUJd1bKpuwAs-GxPfmLkOKPHa_ZcpYn23jmo-2S6VQXFK_7IJ3RZHoLg4G4nDnTDyOzlKQB9sGggyEy7v9JQ7sRQHww_aoODB4X7RDDxDxI9BbMoAHJuTVk1YFdZcYke6a034q37WWOLG6WFEQR54HswwQtrejhb3UHoQEBQt60BD2bop9xnQRw2dwoQ1IIiBEx1W-CqBJ-oC8saaDCsKnJmNxVqoPLZH8vmCHd2VEB-QK-unWXLg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fce30f2-94de-4320-a03c-5db03993b9f4", "record_id": "flaws_cloudtrail:0000229:5fce30f2-94de-4320-a03c-5db03993b9f4", "row_index": 229, "timestamp": "2018-04-17T12:13:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1264, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fce30f2-94de-4320-a03c-5db03993b9f4", "eventTime": "2018-04-17T12:13:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ede8d5-55c2-477b-8e57-75a4b7bbb424", "record_id": "flaws_cloudtrail:0000230:01ede8d5-55c2-477b-8e57-75a4b7bbb424", "row_index": 230, "timestamp": "2018-04-17T12:13:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ede8d5-55c2-477b-8e57-75a4b7bbb424", "eventTime": "2018-04-17T12:13:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: baCnK_Sy25HXxLP6frTH9T8Bo-cc9y1XbFujL_Xb91gRwGQdVbEDNoNDH94j-7mxL4uOoayfsnGvE9lJ2C-FEvCmSnrIURS6t2D4QR48TfJLT_T0vGmD1wc0P5ZfalThmcrtTqB-y_nAaJswt3g9ePCTDRN7fSbxhZBgi29_dL9EvQBEiuNw0Q1wSwNKuzQRvFpRukMDPPIqr8V0DUG9Xdzd2UUgWL0iQjCSS1B1aNTtDrkHHlUhjGH8WxxldOSxuAr8t-oLLtueKnptdTOaHZW33L9oP9vSk2Dnj0mzinKMjS_RutrQU64-SIK613Cm6oEgIc0p16NfZ4fmzE6Lcg9jYly6C1R1pY1FdQ5gQGuj29vRHxPRXdKIFtr9_8ws3HhTnqIODcbPL-cYQvTRg0UsM7V1GNkYXqproBgsi5Fn6HefEI8rWYjzixm00mjopsREu1mSVb36qfqhAKL715MLUp3OZog_QGOPEJvxsC72UXVP-bT72yObW7kAnoESNWROVGDg3V-d8st7nhAmWEREyWPy6Q6SLd2jN2p0KVLWL8d6jk0gv5b38BJNEXH78tjME8gY-lB5633P1zaVN4ZnoJ2us4rKAwoAovzTJXOwRlCYtqFS-YJl3QU5hyBqQa187FOHtYDnYIPq_VeutiIfCh_foRO2lw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee248560f-0a36-4bd1-a647-697d27bc02c9", "record_id": "flaws_cloudtrail:0000231:ee248560f-0a36-4bd1-a647-697d27bc02c9", "row_index": 231, "timestamp": "2018-04-17T12:13:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee248560f-0a36-4bd1-a647-697d27bc02c9", "eventTime": "2018-04-17T12:13:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77bed779-a2ee-4f96-9fa2-60dc181f3bd3", "record_id": "flaws_cloudtrail:0000232:77bed779-a2ee-4f96-9fa2-60dc181f3bd3", "row_index": 232, "timestamp": "2018-04-17T12:18:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 539, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77bed779-a2ee-4f96-9fa2-60dc181f3bd3", "eventTime": "2018-04-17T12:18:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a607f289-e459-4269-8cb1-46c5a158cdfc", "record_id": "flaws_cloudtrail:0000233:a607f289-e459-4269-8cb1-46c5a158cdfc", "row_index": 233, "timestamp": "2018-04-17T12:18:28Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 568, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a607f289-e459-4269-8cb1-46c5a158cdfc", "eventTime": "2018-04-17T12:18:28Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4828798b-9544-4953-a319-335ca6ffd48e", "record_id": "flaws_cloudtrail:0000234:4828798b-9544-4953-a319-335ca6ffd48e", "row_index": 234, "timestamp": "2018-04-17T12:19:34Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 568, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4828798b-9544-4953-a319-335ca6ffd48e", "eventTime": "2018-04-17T12:19:34Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdb0af6b-0c04-45a5-9612-43caaea2ac03", "record_id": "flaws_cloudtrail:0000235:cdb0af6b-0c04-45a5-9612-43caaea2ac03", "row_index": 235, "timestamp": "2018-04-17T12:20:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.6.46.237", "user_agent": "[aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdb0af6b-0c04-45a5-9612-43caaea2ac03", "eventTime": "2018-04-17T12:20:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.6.46.237", "userAgent": "[aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b49c59b-bb4a-47d1-93a2-6c63fcdf4bb9", "record_id": "flaws_cloudtrail:0000236:0b49c59b-bb4a-47d1-93a2-6c63fcdf4bb9", "row_index": 236, "timestamp": "2018-04-17T12:20:41Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 571, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b49c59b-bb4a-47d1-93a2-6c63fcdf4bb9", "eventTime": "2018-04-17T12:20:41Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "124065f1c-3de2-42bb-b5d6-aebf8b7a481b", "record_id": "flaws_cloudtrail:0000237:124065f1c-3de2-42bb-b5d6-aebf8b7a481b", "row_index": 237, "timestamp": "2018-04-17T12:21:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.6.46.237", "user_agent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "124065f1c-3de2-42bb-b5d6-aebf8b7a481b", "eventTime": "2018-04-17T12:21:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.6.46.237", "userAgent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592d85ae-7c75-4d7a-b5de-5a7a4e89181d", "record_id": "flaws_cloudtrail:0000238:592d85ae-7c75-4d7a-b5de-5a7a4e89181d", "row_index": 238, "timestamp": "2018-04-17T12:21:23Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 569, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592d85ae-7c75-4d7a-b5de-5a7a4e89181d", "eventTime": "2018-04-17T12:21:23Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a48da01-6bd9-489d-89b0-1c56a6979a6c", "record_id": "flaws_cloudtrail:0000239:7a48da01-6bd9-489d-89b0-1c56a6979a6c", "row_index": 239, "timestamp": "2018-04-17T12:21:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.6.46.237", "user_agent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a48da01-6bd9-489d-89b0-1c56a6979a6c", "eventTime": "2018-04-17T12:21:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.6.46.237", "userAgent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f88825d-84b6-48d8-bcd3-bc44fdf4db22", "record_id": "flaws_cloudtrail:0000240:7f88825d-84b6-48d8-bcd3-bc44fdf4db22", "row_index": 240, "timestamp": "2018-04-17T12:22:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 539, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f88825d-84b6-48d8-bcd3-bc44fdf4db22", "eventTime": "2018-04-17T12:22:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab88d78e-cd93-430f-84a6-b68f975c0bcd", "record_id": "flaws_cloudtrail:0000241:ab88d78e-cd93-430f-84a6-b68f975c0bcd", "row_index": 241, "timestamp": "2018-04-17T12:22:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.6.46.237", "user_agent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab88d78e-cd93-430f-84a6-b68f975c0bcd", "eventTime": "2018-04-17T12:22:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.6.46.237", "userAgent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d53b2f-3d16-43c3-a7d6-8b299d127e19", "record_id": "flaws_cloudtrail:0000242:a8d53b2f-3d16-43c3-a7d6-8b299d127e19", "row_index": 242, "timestamp": "2018-04-17T12:23:12Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d53b2f-3d16-43c3-a7d6-8b299d127e19", "eventTime": "2018-04-17T12:23:12Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76154fab-2bb6-494d-8cd1-0a9ddaa20d7a", "record_id": "flaws_cloudtrail:0000243:76154fab-2bb6-494d-8cd1-0a9ddaa20d7a", "row_index": 243, "timestamp": "2018-04-17T12:23:20Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.6.46.237", "user_agent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76154fab-2bb6-494d-8cd1-0a9ddaa20d7a", "eventTime": "2018-04-17T12:23:20Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.6.46.237", "userAgent": "aws-cli/1.15.4 Python/2.7.14 Linux/4.13.0-kali1-amd64 botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 8HAhocwk9gFZCkiSgO7gVOqggQnD8YC-7B47GpaejjcpBBkA_b4QehqpxqAOw_o1ZwT3ftyseZ50FQhXq3raMkmRcoWskx7AlqrJu-3jCZfHk038dVGbU__w3fxp2afkWk4VY9u6MmlbyLABhjEFKxsSvB4qOXj-jbGqzosPyT6DontxNFJcHRD2Rkk6WpUoawlD615_FCyqHtAZsBUDZjYU18nYMnxN0O46rqhb4akrJHYS67iX95Kq925c_Mkw0hM0g975DEGNay1JYfEUYpjhZhTI-4-8dP9g-rf93EgQ6TCeo4btaapR3l43Rr9Yu6K4EE_BmzEN9L9htUbiCeXLBpJGfriGZpvBk3oMEmEENfUBNrWRhwwWBde92R_PkffIcuS1M8fZMH04jGofuqgr9flBEjGiXTC6aoEh1Vipjc9zQjAUdPhKobWZE6rSZapfCDSFifC8OmdU4mgodlOOx6iQzAQJ0eIAhCO5-j-fSToNyS8XKBR2zMLWzYzWjMHhXNoG8k0biL3oi6O1teR7yanFzJZ3uLw8N9nl-9f9hMRCVO_kyf-WKjl6Gg-q85LFIxmeOncnkO6Wc3x5TBoBUBQbWlMrxZNDq3zfWgofELvgYIZUExrErpMd", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e937c744-a43f-4283-9409-bdfba204c1bb", "record_id": "flaws_cloudtrail:0000244:e937c744-a43f-4283-9409-bdfba204c1bb", "row_index": 244, "timestamp": "2018-04-17T12:24:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e937c744-a43f-4283-9409-bdfba204c1bb", "eventTime": "2018-04-17T12:24:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbf05971-03a9-4512-86e6-1fb30dea2b58", "record_id": "flaws_cloudtrail:0000245:bbf05971-03a9-4512-86e6-1fb30dea2b58", "row_index": 245, "timestamp": "2018-04-17T12:25:38Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 538, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbf05971-03a9-4512-86e6-1fb30dea2b58", "eventTime": "2018-04-17T12:25:38Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c96ab1e3-30d7-4d0a-bc30-129154191207", "record_id": "flaws_cloudtrail:0000246:c96ab1e3-30d7-4d0a-bc30-129154191207", "row_index": 246, "timestamp": "2018-04-17T12:27:08Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c96ab1e3-30d7-4d0a-bc30-129154191207", "eventTime": "2018-04-17T12:27:08Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b10072b-e8ed-4332-bf59-59bd18e46b7b", "record_id": "flaws_cloudtrail:0000247:2b10072b-e8ed-4332-bf59-59bd18e46b7b", "row_index": 247, "timestamp": "2018-04-17T12:28:22Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 538, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b10072b-e8ed-4332-bf59-59bd18e46b7b", "eventTime": "2018-04-17T12:28:22Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57daa193-b944-4ede-88cc-4b7a40d8948e", "record_id": "flaws_cloudtrail:0000248:57daa193-b944-4ede-88cc-4b7a40d8948e", "row_index": 248, "timestamp": "2018-04-17T12:30:21Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQGQE21Y9JYHWNXGR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "197.119.160.152", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 541, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57daa193-b944-4ede-88cc-4b7a40d8948e", "eventTime": "2018-04-17T12:30:21Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "197.119.160.152", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQGQE21Y9JYHWNXGR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56cd5a5e-a4b2-4f38-b7b4-d33ada8a032f", "record_id": "flaws_cloudtrail:0000249:56cd5a5e-a4b2-4f38-b7b4-d33ada8a032f", "row_index": 249, "timestamp": "2018-04-17T12:41:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56cd5a5e-a4b2-4f38-b7b4-d33ada8a032f", "eventTime": "2018-04-17T12:41:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34622-cb41-4222-ba48-05e2373dcb40", "record_id": "flaws_cloudtrail:0000250:34622-cb41-4222-ba48-05e2373dcb40", "row_index": 250, "timestamp": "2018-04-17T12:41:27Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34622-cb41-4222-ba48-05e2373dcb40", "eventTime": "2018-04-17T12:41:27Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5b9d80f-ebb6-4bcb-a5f2-97e6f250106e", "record_id": "flaws_cloudtrail:0000251:a5b9d80f-ebb6-4bcb-a5f2-97e6f250106e", "row_index": 251, "timestamp": "2018-04-17T12:41:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5b9d80f-ebb6-4bcb-a5f2-97e6f250106e", "eventTime": "2018-04-17T12:41:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ec71c81-2e2c-4856-bfe6-cda95216d9", "record_id": "flaws_cloudtrail:0000252:6ec71c81-2e2c-4856-bfe6-cda95216d9", "row_index": 252, "timestamp": "2018-04-17T12:41:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ec71c81-2e2c-4856-bfe6-cda95216d9", "eventTime": "2018-04-17T12:41:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b3d6183-ff56-4f2e-afe9-f931db1568d0", "record_id": "flaws_cloudtrail:0000253:0b3d6183-ff56-4f2e-afe9-f931db1568d0", "row_index": 253, "timestamp": "2018-04-17T12:41:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b3d6183-ff56-4f2e-afe9-f931db1568d0", "eventTime": "2018-04-17T12:41:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0bcd7c9-97a1-4153-84d1-1d23f685360c", "record_id": "flaws_cloudtrail:0000254:f0bcd7c9-97a1-4153-84d1-1d23f685360c", "row_index": 254, "timestamp": "2018-04-17T12:41:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0bcd7c9-97a1-4153-84d1-1d23f685360c", "eventTime": "2018-04-17T12:41:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe31e7a-b8ce-464a-9330-a1662ab77f7c", "record_id": "flaws_cloudtrail:0000255:4fe31e7a-b8ce-464a-9330-a1662ab77f7c", "row_index": 255, "timestamp": "2018-04-17T12:41:29Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe31e7a-b8ce-464a-9330-a1662ab77f7c", "eventTime": "2018-04-17T12:41:29Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b68ea71b-1ec8-42f6-9501-dc6db367993f6", "record_id": "flaws_cloudtrail:0000256:b68ea71b-1ec8-42f6-9501-dc6db367993f6", "row_index": 256, "timestamp": "2018-04-17T12:41:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b68ea71b-1ec8-42f6-9501-dc6db367993f6", "eventTime": "2018-04-17T12:41:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f826c24d-dfa4-4b06-a8ac-fda3ef7c1912", "record_id": "flaws_cloudtrail:0000257:f826c24d-dfa4-4b06-a8ac-fda3ef7c1912", "row_index": 257, "timestamp": "2018-04-17T12:41:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f826c24d-dfa4-4b06-a8ac-fda3ef7c1912", "eventTime": "2018-04-17T12:41:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1fefee-c32d-4706-afbd-db825d028002", "record_id": "flaws_cloudtrail:0000258:da1fefee-c32d-4706-afbd-db825d028002", "row_index": 258, "timestamp": "2018-04-17T12:41:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1fefee-c32d-4706-afbd-db825d028002", "eventTime": "2018-04-17T12:41:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce03545-0b85-4e3b-a7e0-1ee426e503d5", "record_id": "flaws_cloudtrail:0000259:ce03545-0b85-4e3b-a7e0-1ee426e503d5", "row_index": 259, "timestamp": "2018-04-17T12:41:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce03545-0b85-4e3b-a7e0-1ee426e503d5", "eventTime": "2018-04-17T12:41:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a237ba5-7b72-4dbd-8283-3a8f29126", "record_id": "flaws_cloudtrail:0000260:6a237ba5-7b72-4dbd-8283-3a8f29126", "row_index": 260, "timestamp": "2018-04-17T12:41:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a237ba5-7b72-4dbd-8283-3a8f29126", "eventTime": "2018-04-17T12:41:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f0605b9-6bb2-4b14-9612-f97ad3f8d174", "record_id": "flaws_cloudtrail:0000261:9f0605b9-6bb2-4b14-9612-f97ad3f8d174", "row_index": 261, "timestamp": "2018-04-17T12:41:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f0605b9-6bb2-4b14-9612-f97ad3f8d174", "eventTime": "2018-04-17T12:41:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f007af-3de1-4f6a-85e3-749df5ae9712", "record_id": "flaws_cloudtrail:0000262:e0f007af-3de1-4f6a-85e3-749df5ae9712", "row_index": 262, "timestamp": "2018-04-17T12:41:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f007af-3de1-4f6a-85e3-749df5ae9712", "eventTime": "2018-04-17T12:41:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2ba124-59c2-4bea-86a3-b5a53bab52ec", "record_id": "flaws_cloudtrail:0000263:9b2ba124-59c2-4bea-86a3-b5a53bab52ec", "row_index": 263, "timestamp": "2018-04-17T12:41:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2ba124-59c2-4bea-86a3-b5a53bab52ec", "eventTime": "2018-04-17T12:41:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef75d34-68f7-4ab2-9348-a217f072cb39", "record_id": "flaws_cloudtrail:0000264:5ef75d34-68f7-4ab2-9348-a217f072cb39", "row_index": 264, "timestamp": "2018-04-17T12:41:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef75d34-68f7-4ab2-9348-a217f072cb39", "eventTime": "2018-04-17T12:41:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ed46fcf-2ac9-43c0-b5bd-53e6ccd28ef7", "record_id": "flaws_cloudtrail:0000265:7ed46fcf-2ac9-43c0-b5bd-53e6ccd28ef7", "row_index": 265, "timestamp": "2018-04-17T12:41:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ed46fcf-2ac9-43c0-b5bd-53e6ccd28ef7", "eventTime": "2018-04-17T12:41:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e432302d-c4be-47ff-aa86-149c3bf70543", "record_id": "flaws_cloudtrail:0000266:3e432302d-c4be-47ff-aa86-149c3bf70543", "row_index": 266, "timestamp": "2018-04-17T12:41:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e432302d-c4be-47ff-aa86-149c3bf70543", "eventTime": "2018-04-17T12:41:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4603d968-1600-425e-a96d-43a93a1d32df", "record_id": "flaws_cloudtrail:0000267:4603d968-1600-425e-a96d-43a93a1d32df", "row_index": 267, "timestamp": "2018-04-17T12:41:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4603d968-1600-425e-a96d-43a93a1d32df", "eventTime": "2018-04-17T12:41:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22283db-db72-4499-9cf4-7d82928a2", "record_id": "flaws_cloudtrail:0000268:22283db-db72-4499-9cf4-7d82928a2", "row_index": 268, "timestamp": "2018-04-17T12:41:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22283db-db72-4499-9cf4-7d82928a2", "eventTime": "2018-04-17T12:41:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d79cb1fc-163c-4fab-89de-1934727a3c27", "record_id": "flaws_cloudtrail:0000269:d79cb1fc-163c-4fab-89de-1934727a3c27", "row_index": 269, "timestamp": "2018-04-17T12:41:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d79cb1fc-163c-4fab-89de-1934727a3c27", "eventTime": "2018-04-17T12:41:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76dfd786-c40d-4a1c-85c5-eed5c36470a", "record_id": "flaws_cloudtrail:0000270:76dfd786-c40d-4a1c-85c5-eed5c36470a", "row_index": 270, "timestamp": "2018-04-17T12:41:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76dfd786-c40d-4a1c-85c5-eed5c36470a", "eventTime": "2018-04-17T12:41:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f5c8dc0-09e6-4afc-810f-41553bab48cd", "record_id": "flaws_cloudtrail:0000271:2f5c8dc0-09e6-4afc-810f-41553bab48cd", "row_index": 271, "timestamp": "2018-04-17T12:41:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f5c8dc0-09e6-4afc-810f-41553bab48cd", "eventTime": "2018-04-17T12:41:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12aef46c-b3d3-473e-9164-3bb90e8d5a98", "record_id": "flaws_cloudtrail:0000272:12aef46c-b3d3-473e-9164-3bb90e8d5a98", "row_index": 272, "timestamp": "2018-04-17T12:41:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12aef46c-b3d3-473e-9164-3bb90e8d5a98", "eventTime": "2018-04-17T12:41:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c33c341c-db9b-4a18-9780-1a7963b485a3", "record_id": "flaws_cloudtrail:0000273:c33c341c-db9b-4a18-9780-1a7963b485a3", "row_index": 273, "timestamp": "2018-04-17T12:41:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c33c341c-db9b-4a18-9780-1a7963b485a3", "eventTime": "2018-04-17T12:41:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfee6e46-91e4-4c70-8660-65b6ca44f07b", "record_id": "flaws_cloudtrail:0000274:bfee6e46-91e4-4c70-8660-65b6ca44f07b", "row_index": 274, "timestamp": "2018-04-17T12:41:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfee6e46-91e4-4c70-8660-65b6ca44f07b", "eventTime": "2018-04-17T12:41:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e45bf2-c30f-4302-b394-00c5bb7e61dd", "record_id": "flaws_cloudtrail:0000275:e5e45bf2-c30f-4302-b394-00c5bb7e61dd", "row_index": 275, "timestamp": "2018-04-17T12:41:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e45bf2-c30f-4302-b394-00c5bb7e61dd", "eventTime": "2018-04-17T12:41:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e028397-5d54-43ca-9083-3f99603b0ffa", "record_id": "flaws_cloudtrail:0000276:e028397-5d54-43ca-9083-3f99603b0ffa", "row_index": 276, "timestamp": "2018-04-17T12:41:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e028397-5d54-43ca-9083-3f99603b0ffa", "eventTime": "2018-04-17T12:41:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aa19e6c-8b09-4ee8-8e1d-8ba82addfd89", "record_id": "flaws_cloudtrail:0000277:4aa19e6c-8b09-4ee8-8e1d-8ba82addfd89", "row_index": 277, "timestamp": "2018-04-17T12:41:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aa19e6c-8b09-4ee8-8e1d-8ba82addfd89", "eventTime": "2018-04-17T12:41:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OGv8HurALCVAK1_sKt2lWu6IsbRicvKdV-0GKLixwyX2PS4eTU9JMNj3QLg6lValOmqkr-339npOlrD9qePjciW75OxD2zHAUkvze_n11O9fLrP9gQ-25fD2ZyczfprVMVFxnwg9fThhbqnh2qG5gYsUG1smuIwVb3QQFB2B_p7gQTZOoQOo9xLmYNvk0KaizFBtsURa0VKTN6A5GLIHclLgCpXS59CHCHURugcBBWA7ZdDkyiaiReOaXrYJC_FjJgpypbfdsVBaupafBOC3ae-ys-sTyQp5zlWv2EWDSIx4s93i2nkWBy8os74xut3897EMpIBIHMpnYWEyn3qL_GcVLlfr20lO6X0EHhOj5wfrkD5km5Syp1BHZ68X0rQtSu5tRiW79o69m3_PeQ3CAIexSisKHfEwDx8Ymj810zzoMDEsL_ImiVVXfIrgcQ3LoTV-FnoFvF5DFkRpdkxza_e_0saYs9pqtfEZfX9TTEVdkPLtFkd-K0b5o2ZxVkPd-m2Cr3XQRepj0aCSiRgKVuoLglPaxsAjfUwtuGfVb0PYmThF2IiakxZL3YJSiVtu7-Aom23ak9frYJ9NXG2YM-x0ny8QGXDofA_z7APxMvvznO7yKYM5FBqoRacpiVnawGRIObD6yEVvAi6E-lk7YoQhnY0ele5F3wo", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbf86c3c-e312-4791-9072-e5a8d24bdd61", "record_id": "flaws_cloudtrail:0000278:bbf86c3c-e312-4791-9072-e5a8d24bdd61", "row_index": 278, "timestamp": "2018-04-17T12:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbf86c3c-e312-4791-9072-e5a8d24bdd61", "eventTime": "2018-04-17T12:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fde504a7-1f5b-448e-aebd-5cc453e0981f", "record_id": "flaws_cloudtrail:0000279:fde504a7-1f5b-448e-aebd-5cc453e0981f", "row_index": 279, "timestamp": "2018-04-17T12:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fde504a7-1f5b-448e-aebd-5cc453e0981f", "eventTime": "2018-04-17T12:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ae5476-2ef4-4e94-97f6-7f6d14e337fc", "record_id": "flaws_cloudtrail:0000280:65ae5476-2ef4-4e94-97f6-7f6d14e337fc", "row_index": 280, "timestamp": "2018-04-17T12:41:39Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ae5476-2ef4-4e94-97f6-7f6d14e337fc", "eventTime": "2018-04-17T12:41:39Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6808de82-bf50-4b96-bb91-725cdfdf43da", "record_id": "flaws_cloudtrail:0000281:6808de82-bf50-4b96-bb91-725cdfdf43da", "row_index": 281, "timestamp": "2018-04-17T12:41:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6808de82-bf50-4b96-bb91-725cdfdf43da", "eventTime": "2018-04-17T12:41:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d83d6a4-c8e9-4388-9009-a83f4a809d11", "record_id": "flaws_cloudtrail:0000282:3d83d6a4-c8e9-4388-9009-a83f4a809d11", "row_index": 282, "timestamp": "2018-04-17T12:41:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d83d6a4-c8e9-4388-9009-a83f4a809d11", "eventTime": "2018-04-17T12:41:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6d4b75e-1f1d-425d-a831-0d02e71a465c", "record_id": "flaws_cloudtrail:0000283:e6d4b75e-1f1d-425d-a831-0d02e71a465c", "row_index": 283, "timestamp": "2018-04-17T12:41:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6d4b75e-1f1d-425d-a831-0d02e71a465c", "eventTime": "2018-04-17T12:41:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: D-SkY7Y7nB3r6TZ5nqygAZLWNI7gC7R7x19ts0iT5UxJDeRhbqP-6W7Eoy2gIJC1hYcrslVBs6bqRz6NDnUzx0ZicCb3x8I7isXdJQDTmaURG-KMZgUVaVVSWEoze90cm4BI4pqL46jSrSauJ3r_RTvn4vJzWQ8DlO8X5E_Q1scFYNR4xuAq-4TXY145wnb0cMQR-e5SIbg7W0lcs8Q8F7X_7ZnnvurSC1o8oOxPsimTLq14unYOhhY-UyOMGyVfrA7FBHJB7iXq3vRejkqgDh3qSFFJxvUToukdDAyRgE-XGO1uiLk7d5Rfztcz5xsSDrLCXHbOaW5_fPTYoR-TSsvOiBkOA5oi4L-FP0o7269isVu01OsB4AM-jXn2UQvCaN5337-z3GxmtoVt6l5Kd0TUnQt28OP8Ob3wDWQlAh4U_WEWpp_9n3R6l2AU4aDKG0vuvA3Z2TZ2PG8duqzoZ-m8KZT8sGKi4VLTH5_qTM7otEs4aXEL4ZlIS-Pdr7yLVk284Y5DvAyLtp65PPLtCe3nCf7NsRqMUBt1X6I01q6UBpgNyoIJ9rPMQYQGXkpkptXldLxa6cWgiy421OOLeyTORR3sp04sYFKKZO77r2R6hYsq0z-0PNKkZm7Tw8ViRtpaVJiqPRILX4r6S8J439H4v6NokcCAqg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48495c-cd4c-440a-a886-5bdc7b1b08c9", "record_id": "flaws_cloudtrail:0000284:48495c-cd4c-440a-a886-5bdc7b1b08c9", "row_index": 284, "timestamp": "2018-04-17T12:41:41Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48495c-cd4c-440a-a886-5bdc7b1b08c9", "eventTime": "2018-04-17T12:41:41Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f953fa5e-cf47-4d7d-99f3-db391b345329f", "record_id": "flaws_cloudtrail:0000285:f953fa5e-cf47-4d7d-99f3-db391b345329f", "row_index": 285, "timestamp": "2018-04-17T12:41:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f953fa5e-cf47-4d7d-99f3-db391b345329f", "eventTime": "2018-04-17T12:41:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c8b097-0617-4735-97c6-32041f88", "record_id": "flaws_cloudtrail:0000286:90c8b097-0617-4735-97c6-32041f88", "row_index": 286, "timestamp": "2018-04-17T12:41:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c8b097-0617-4735-97c6-32041f88", "eventTime": "2018-04-17T12:41:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72510-5873-4ebf-8013-1199a621e74c", "record_id": "flaws_cloudtrail:0000287:72510-5873-4ebf-8013-1199a621e74c", "row_index": 287, "timestamp": "2018-04-17T12:41:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72510-5873-4ebf-8013-1199a621e74c", "eventTime": "2018-04-17T12:41:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _KDudfogSKgaDgiAJ29TJSaduE3qQK0R3BWZgNwlj80Gvin3o_Qv9kJNTzXrcISYVH79yOpCgi3LjSq-xyF_fm_8B0rBS5VFL1kf0sCufAGvzwWODk4e5v3CeLF3qbpk854SYvwc1Xc6RmbgzdYj_4usH7sZ8-EuzMJ1MqNdKV4sOdksJT0dMGIV8j8UKtZVeHdzlbkACUVsGHooCSi3lZYaynt99LbEPjybB2s83Jx1iArqaJ5AZm3fsuXh0NGLI5V2uCOCt8nle-44z1nUVAH_2pG1kOQgvEOqENmfaVASBI5G-OaD53RlqXKSjYF9ChDjeEkfxK4tej7B7cLCVit6WfGyAzrF9hryu6MW1_tcASBs3XwwYSvQl_sEpSXUCBkt6ffK3de1q_m9u4JJdsE62twJ2OdPobHX7BYuHSrNtqvKdRkD77vSUXKVH71lxWaTI5Qw4HxdxuVija4Lr-znwvmBOpyquAyCdeSgwqDeAVIpvN8Jhvqv-9dMuX1uEZAisLYcpKXVnYSzvE8R8C5_uoZl-hWu5eWSU7QIUAqkP7j9suS5rrycZaCsqemYJnIFELRtxrZoZf9aOBFfZ6c7fPlbTFZfsCu-faMhhkI6uAIuGSWRA-stBPeDfekLWGdk-CO9tzn6YUaPrb_136oDwTKU04pRMXy0eYom", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c81667d-b4ae-41df-b513-b261057e66d8c", "record_id": "flaws_cloudtrail:0000288:c81667d-b4ae-41df-b513-b261057e66d8c", "row_index": 288, "timestamp": "2018-04-17T12:41:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c81667d-b4ae-41df-b513-b261057e66d8c", "eventTime": "2018-04-17T12:41:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: XuokvTV6tWYDVJs9qfshcuQuOEcJYHU-Wdpe0RcdQJPigoEhTppd1DpPSJHYOjj4oXNxTjm-sqnyabE0QKUhlqXFaHQptbR7j_1wV3msqhH5aZsDFaStBvWltTHQ55WFUAd9PaGdAn2LIwOuxgDL2MjxthNkkR-JXUo_2dgV2EbvMXWHQhe6d3UM68XVVSDvJALWiqug9O-KZsyGHgHIKG_2e6su4i_B6iWONp5wuQtxfFtawFYmW8oJ1onpeSYOlJNcYoSKmbpiu94ZBZ5CPRTF5JAhrJbgo9aMgngnsYXalLzJQoCvl1LJnQDkfhmuW4bvAjJhRMdnFnxy2nDYFTxrT5p2XUbcz_QTXwTBLXnXF4xXRmCk6SnT6x8Rcxsc3hGPrPw5SO39uL-MFp1k8GyoygylFrKVR2pu84IXl32Me2fNVnSJ2Mm4DfKkaETZY5Zm1DbH_LUu_teKsWxjNLw71JZibwp9ucSWI9cAFFtnDFQQVlOvEWtLMIsAx1eYf_LxCTfC5TrWN6NBBb5kcw0leYNFuq8GBGG3Y1pyVIBCGo_MzIUdWfQ8i2_osLHGWdeEfmLqMsEboxLpLMY0dSMX3Ly94gpvEXOS4pdCMtc21n0uQe6CEZXTiUnmFBxYRzcZCKOTm4Askca-oWlFRiHfqV5g-HMTATQutnsK", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dedb49e-5543-4770-9f3c-88e166387497", "record_id": "flaws_cloudtrail:0000289:0dedb49e-5543-4770-9f3c-88e166387497", "row_index": 289, "timestamp": "2018-04-17T12:41:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dedb49e-5543-4770-9f3c-88e166387497", "eventTime": "2018-04-17T12:41:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86c12ef9-7c39-4e47-b652-2f2308ece226", "record_id": "flaws_cloudtrail:0000290:86c12ef9-7c39-4e47-b652-2f2308ece226", "row_index": 290, "timestamp": "2018-04-17T12:41:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86c12ef9-7c39-4e47-b652-2f2308ece226", "eventTime": "2018-04-17T12:41:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb2641e-e89d-4d06-9a6c-9d3ab716ab7a", "record_id": "flaws_cloudtrail:0000291:eeb2641e-e89d-4d06-9a6c-9d3ab716ab7a", "row_index": 291, "timestamp": "2018-04-17T12:41:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb2641e-e89d-4d06-9a6c-9d3ab716ab7a", "eventTime": "2018-04-17T12:41:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18caf0a5-6610-458e-a116-bdd2236fa004", "record_id": "flaws_cloudtrail:0000292:18caf0a5-6610-458e-a116-bdd2236fa004", "row_index": 292, "timestamp": "2018-04-17T12:41:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18caf0a5-6610-458e-a116-bdd2236fa004", "eventTime": "2018-04-17T12:41:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864f50f0-2533-480e-83cf-3a253948f512", "record_id": "flaws_cloudtrail:0000293:864f50f0-2533-480e-83cf-3a253948f512", "row_index": 293, "timestamp": "2018-04-17T12:41:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864f50f0-2533-480e-83cf-3a253948f512", "eventTime": "2018-04-17T12:41:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "821ca2dc-3ee7-4113-ba30-e672a155a823", "record_id": "flaws_cloudtrail:0000294:821ca2dc-3ee7-4113-ba30-e672a155a823", "row_index": 294, "timestamp": "2018-04-17T12:41:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "821ca2dc-3ee7-4113-ba30-e672a155a823", "eventTime": "2018-04-17T12:41:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "745629ff-702b-49cb-8388-3fb9c497033e1", "record_id": "flaws_cloudtrail:0000295:745629ff-702b-49cb-8388-3fb9c497033e1", "row_index": 295, "timestamp": "2018-04-17T12:41:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "745629ff-702b-49cb-8388-3fb9c497033e1", "eventTime": "2018-04-17T12:41:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea46335-fa29-4adb-afb2-8dc1d32caf42", "record_id": "flaws_cloudtrail:0000296:6ea46335-fa29-4adb-afb2-8dc1d32caf42", "row_index": 296, "timestamp": "2018-04-17T12:41:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea46335-fa29-4adb-afb2-8dc1d32caf42", "eventTime": "2018-04-17T12:41:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80783d9-1ccc-4590-8233-e39894c", "record_id": "flaws_cloudtrail:0000297:b80783d9-1ccc-4590-8233-e39894c", "row_index": 297, "timestamp": "2018-04-17T12:41:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80783d9-1ccc-4590-8233-e39894c", "eventTime": "2018-04-17T12:41:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa66dbf5-a24c-49b8-b16f-29403e870772", "record_id": "flaws_cloudtrail:0000298:aa66dbf5-a24c-49b8-b16f-29403e870772", "row_index": 298, "timestamp": "2018-04-17T12:41:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa66dbf5-a24c-49b8-b16f-29403e870772", "eventTime": "2018-04-17T12:41:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd93c6be-22ba-4a7d-97b6-f48223", "record_id": "flaws_cloudtrail:0000299:bd93c6be-22ba-4a7d-97b6-f48223", "row_index": 299, "timestamp": "2018-04-17T12:41:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd93c6be-22ba-4a7d-97b6-f48223", "eventTime": "2018-04-17T12:41:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dabb73d-377b-442c-be38-3901d5b9a732", "record_id": "flaws_cloudtrail:0000300:0dabb73d-377b-442c-be38-3901d5b9a732", "row_index": 300, "timestamp": "2018-04-17T12:41:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dabb73d-377b-442c-be38-3901d5b9a732", "eventTime": "2018-04-17T12:41:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0532ee12-b5a5-40db-8ab3-360ebe690749", "record_id": "flaws_cloudtrail:0000301:0532ee12-b5a5-40db-8ab3-360ebe690749", "row_index": 301, "timestamp": "2018-04-17T12:41:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0532ee12-b5a5-40db-8ab3-360ebe690749", "eventTime": "2018-04-17T12:41:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ae0e4a-0b97-441c-9ab8-7bbb2b2b4b0c", "record_id": "flaws_cloudtrail:0000302:68ae0e4a-0b97-441c-9ab8-7bbb2b2b4b0c", "row_index": 302, "timestamp": "2018-04-17T12:41:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ae0e4a-0b97-441c-9ab8-7bbb2b2b4b0c", "eventTime": "2018-04-17T12:41:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4aadb66-7941-4225-8544-81a467a0c7f0", "record_id": "flaws_cloudtrail:0000303:b4aadb66-7941-4225-8544-81a467a0c7f0", "row_index": 303, "timestamp": "2018-04-17T12:41:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4aadb66-7941-4225-8544-81a467a0c7f0", "eventTime": "2018-04-17T12:41:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d92232f-3543-41be-9e80-1135b298b1bf", "record_id": "flaws_cloudtrail:0000304:d92232f-3543-41be-9e80-1135b298b1bf", "row_index": 304, "timestamp": "2018-04-17T12:41:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d92232f-3543-41be-9e80-1135b298b1bf", "eventTime": "2018-04-17T12:41:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f2e59a-db5f-41c3-8dc4-3538e1a6ce1c", "record_id": "flaws_cloudtrail:0000305:a1f2e59a-db5f-41c3-8dc4-3538e1a6ce1c", "row_index": 305, "timestamp": "2018-04-17T12:41:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f2e59a-db5f-41c3-8dc4-3538e1a6ce1c", "eventTime": "2018-04-17T12:41:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b96cdc0e-8036-4f77-85ee-fc78dcead36e", "record_id": "flaws_cloudtrail:0000306:b96cdc0e-8036-4f77-85ee-fc78dcead36e", "row_index": 306, "timestamp": "2018-04-17T12:41:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b96cdc0e-8036-4f77-85ee-fc78dcead36e", "eventTime": "2018-04-17T12:41:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2ddbc4-99ac-45a7-b5f5-174f1a80c27c", "record_id": "flaws_cloudtrail:0000307:0f2ddbc4-99ac-45a7-b5f5-174f1a80c27c", "row_index": 307, "timestamp": "2018-04-17T12:41:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2ddbc4-99ac-45a7-b5f5-174f1a80c27c", "eventTime": "2018-04-17T12:41:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1955ebd-acb9-49ab-9ff4-d72568b217f2", "record_id": "flaws_cloudtrail:0000308:a1955ebd-acb9-49ab-9ff4-d72568b217f2", "row_index": 308, "timestamp": "2018-04-17T12:41:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1955ebd-acb9-49ab-9ff4-d72568b217f2", "eventTime": "2018-04-17T12:41:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e6b04e9-c564-4889-912d-f40805026fc5", "record_id": "flaws_cloudtrail:0000309:0e6b04e9-c564-4889-912d-f40805026fc5", "row_index": 309, "timestamp": "2018-04-17T12:41:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e6b04e9-c564-4889-912d-f40805026fc5", "eventTime": "2018-04-17T12:41:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36b11916-a3c0-46ef-8793-9199c7ee35c5", "record_id": "flaws_cloudtrail:0000310:36b11916-a3c0-46ef-8793-9199c7ee35c5", "row_index": 310, "timestamp": "2018-04-17T12:41:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36b11916-a3c0-46ef-8793-9199c7ee35c5", "eventTime": "2018-04-17T12:41:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c88ab87-72a8-40c6-9836-bde0e1914fbb", "record_id": "flaws_cloudtrail:0000311:7c88ab87-72a8-40c6-9836-bde0e1914fbb", "row_index": 311, "timestamp": "2018-04-17T12:41:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c88ab87-72a8-40c6-9836-bde0e1914fbb", "eventTime": "2018-04-17T12:41:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eaf7799-4569-4320-8d02-b38bdcbcb2f5", "record_id": "flaws_cloudtrail:0000312:5eaf7799-4569-4320-8d02-b38bdcbcb2f5", "row_index": 312, "timestamp": "2018-04-17T12:41:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eaf7799-4569-4320-8d02-b38bdcbcb2f5", "eventTime": "2018-04-17T12:41:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f1fe92-a2e7-4246-a330-370be1131cce", "record_id": "flaws_cloudtrail:0000313:56f1fe92-a2e7-4246-a330-370be1131cce", "row_index": 313, "timestamp": "2018-04-17T12:41:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f1fe92-a2e7-4246-a330-370be1131cce", "eventTime": "2018-04-17T12:41:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "163b8636-91cf-4611-933e-072af7496c0d", "record_id": "flaws_cloudtrail:0000314:163b8636-91cf-4611-933e-072af7496c0d", "row_index": 314, "timestamp": "2018-04-17T12:41:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "163b8636-91cf-4611-933e-072af7496c0d", "eventTime": "2018-04-17T12:41:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c46aea5e-fa06-4e17-9c55-6e36964ea616", "record_id": "flaws_cloudtrail:0000315:c46aea5e-fa06-4e17-9c55-6e36964ea616", "row_index": 315, "timestamp": "2018-04-17T12:41:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c46aea5e-fa06-4e17-9c55-6e36964ea616", "eventTime": "2018-04-17T12:41:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442b7251-0d1b-489b-9446-caedba081d54", "record_id": "flaws_cloudtrail:0000316:442b7251-0d1b-489b-9446-caedba081d54", "row_index": 316, "timestamp": "2018-04-17T12:41:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442b7251-0d1b-489b-9446-caedba081d54", "eventTime": "2018-04-17T12:41:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: P3lTjburNgzbEEAPky4vqB97zfD66wD7pmZtpzbMCvQ_L50HNMETJuKwDHcobGobe5ejIh14IvuUkZTMJilixrkv3B_3eDiXWHxcDB3ZxvZZ9Dh0Tb9pjsRO33y1BCt7208zURmzqL2QtsQRTbTuEYvt8OjmWE00fe1k1tzxt18i_uG6kwlIrkagGNyWWiuYzdB6XMWbaYt_D57Z34W1XoIdQOApNK6wmy6SmtDGl3cuhoAMU8hYREPayOYkOrLm2CRr87OKu4vIvaumRlRi7d4WaIFyTBH3ZhdjWXnfKAwRVX9bbPpUY2CvcG2AiJnZn72W6DJom6tT4nszJygfhjQCoT7zqgONRDsoKnx1qyTh3HF5ld9eg80Hb-VvUAfs2IScmQaYoyuAh0uhbPcU9O2aPrrY_JqwDA2GQOIb51xvGKbv4hluCS41aqKeiCIRHuzCztANcW53QPczpjGRpKHGqukFRBHnVkhbvLRJ7kQDSxTskgeqfEUWkiwN3jd0YI3ZBMyh0c9EQNZ9FYbphuRWHhBi08jEoTzChEZmdvODO3gYhylu5ZCc54aLB1bTU0ukVHwQoqINqWcsbVB7aLmjJcORRno_Hdigaz4IpoBoC_ZIMJkXbtWhPV7vVkHpZVPP1sykpFl7RvlWyLe_z2Pl-LRty2M2eJQSQbc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ede61b-1a69-4fff-beab-b17948e8d16b", "record_id": "flaws_cloudtrail:0000317:b7ede61b-1a69-4fff-beab-b17948e8d16b", "row_index": 317, "timestamp": "2018-04-17T12:41:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ede61b-1a69-4fff-beab-b17948e8d16b", "eventTime": "2018-04-17T12:41:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bdae0ca-aad3-42f7-8d71-5aff558990", "record_id": "flaws_cloudtrail:0000318:4bdae0ca-aad3-42f7-8d71-5aff558990", "row_index": 318, "timestamp": "2018-04-17T12:41:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1327, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bdae0ca-aad3-42f7-8d71-5aff558990", "eventTime": "2018-04-17T12:41:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc46cf2b-fd73-48eb-9599-9ab15140b599", "record_id": "flaws_cloudtrail:0000319:fc46cf2b-fd73-48eb-9599-9ab15140b599", "row_index": 319, "timestamp": "2018-04-17T12:42:01Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc46cf2b-fd73-48eb-9599-9ab15140b599", "eventTime": "2018-04-17T12:42:01Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6741d2f3-e339-4adf-936e-49d4f3a5cb6c", "record_id": "flaws_cloudtrail:0000320:6741d2f3-e339-4adf-936e-49d4f3a5cb6c", "row_index": 320, "timestamp": "2018-04-17T12:42:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6741d2f3-e339-4adf-936e-49d4f3a5cb6c", "eventTime": "2018-04-17T12:42:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85d0be46-804e-4ee5-9998-898f89cfdf6e", "record_id": "flaws_cloudtrail:0000321:85d0be46-804e-4ee5-9998-898f89cfdf6e", "row_index": 321, "timestamp": "2018-04-17T12:42:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85d0be46-804e-4ee5-9998-898f89cfdf6e", "eventTime": "2018-04-17T12:42:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f736ab-fe0e-407b-a925-2153ffc41425", "record_id": "flaws_cloudtrail:0000322:35f736ab-fe0e-407b-a925-2153ffc41425", "row_index": 322, "timestamp": "2018-04-17T12:42:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f736ab-fe0e-407b-a925-2153ffc41425", "eventTime": "2018-04-17T12:42:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2554b0c1-e886-4924-a633-6a77373", "record_id": "flaws_cloudtrail:0000323:2554b0c1-e886-4924-a633-6a77373", "row_index": 323, "timestamp": "2018-04-17T12:42:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1328, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2554b0c1-e886-4924-a633-6a77373", "eventTime": "2018-04-17T12:42:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "281fce69-5498-40c5-b546-de09c70add98", "record_id": "flaws_cloudtrail:0000324:281fce69-5498-40c5-b546-de09c70add98", "row_index": 324, "timestamp": "2018-04-17T12:42:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "281fce69-5498-40c5-b546-de09c70add98", "eventTime": "2018-04-17T12:42:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190655d-17b9-4201-8157-16a37f780236", "record_id": "flaws_cloudtrail:0000325:190655d-17b9-4201-8157-16a37f780236", "row_index": 325, "timestamp": "2018-04-17T12:42:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190655d-17b9-4201-8157-16a37f780236", "eventTime": "2018-04-17T12:42:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4563ebd3-a5eb-429e-af77-737389a18a090", "record_id": "flaws_cloudtrail:0000326:4563ebd3-a5eb-429e-af77-737389a18a090", "row_index": 326, "timestamp": "2018-04-17T12:42:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4563ebd3-a5eb-429e-af77-737389a18a090", "eventTime": "2018-04-17T12:42:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2H2ERapEtGb1KX_abY5QbTRqjo7Kj13dVipaNkyIUDkmv0PGVIfHRX4fWjKWMEIHtl_hGiz4t4KLHwPqiWE8pXb6kpbijYJ0y3bVWlSS9YM0v46YTcELI3ZnIJMpiBZm8Pc46RYR-u7-VVo7gkH7DIeBi5r6WfiIqfTiNuL1kKZanLIIrEjnhgGieQVgEfN65wdaWuFKvYv-_VwLph2eLuWLWlFBtiRoiaeT1PmWeCZd7iCck3j3jf9iRUBhZCOECGCXquhb6vhziCbLrsAj4tsQUZam1tx-3gd2hDk3PEi-PeP2Ga_9ss8Cwj_MWQRwLNm7UkgV9Xq1te4sn1gN0O12etyW2logdy1QGRN05sMPQG_qxZbHU9ymBMBxK5VcWy3UtsqY3x5750VHAqglNH8xgE_LqJ8vGPLsaFxs5pi3Md8vPvotNQJrOzqAzTe7DY11oirkDcyZ0LsrLJ-fPh70K8v8GLUj-uy22RwYeyU55g6cFCvgOm8BAFftBhXdXEii4eqHt56SuquFVjtX5Bzsp_k2d4Pzc8UVyG929k9DdRHYYB_8JxZQhyvi73la-sNxwmygbaWsMUqUtyW64A31cu1r2trZkkjKR4b53jZ7y9Epb00gtSwBo8Ne2LhDsYDdwg9yiZAk-aEWamuZssxo5QdoF5P4Nk-hvgI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d51bd64-0872-4de2-ad80-655132e703f48", "record_id": "flaws_cloudtrail:0000327:3d51bd64-0872-4de2-ad80-655132e703f48", "row_index": 327, "timestamp": "2018-04-17T12:42:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d51bd64-0872-4de2-ad80-655132e703f48", "eventTime": "2018-04-17T12:42:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716c1c21-4420-49b8-aacb-64730cf9d77d", "record_id": "flaws_cloudtrail:0000328:716c1c21-4420-49b8-aacb-64730cf9d77d", "row_index": 328, "timestamp": "2018-04-17T12:42:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716c1c21-4420-49b8-aacb-64730cf9d77d", "eventTime": "2018-04-17T12:42:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e50879-217a-4587-baee-0cb9ba4dcb9e", "record_id": "flaws_cloudtrail:0000329:2e50879-217a-4587-baee-0cb9ba4dcb9e", "row_index": 329, "timestamp": "2018-04-17T12:42:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e50879-217a-4587-baee-0cb9ba4dcb9e", "eventTime": "2018-04-17T12:42:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae7256f-25ac-4b3f-8c38-8d4576e7e5e3", "record_id": "flaws_cloudtrail:0000330:3ae7256f-25ac-4b3f-8c38-8d4576e7e5e3", "row_index": 330, "timestamp": "2018-04-17T12:42:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae7256f-25ac-4b3f-8c38-8d4576e7e5e3", "eventTime": "2018-04-17T12:42:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab69c96-3703-4e0a-95a9-ea84953cf9", "record_id": "flaws_cloudtrail:0000331:0ab69c96-3703-4e0a-95a9-ea84953cf9", "row_index": 331, "timestamp": "2018-04-17T12:42:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab69c96-3703-4e0a-95a9-ea84953cf9", "eventTime": "2018-04-17T12:42:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979120cb-c362-45a9-9248-6029eefb9735", "record_id": "flaws_cloudtrail:0000332:979120cb-c362-45a9-9248-6029eefb9735", "row_index": 332, "timestamp": "2018-04-17T12:42:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979120cb-c362-45a9-9248-6029eefb9735", "eventTime": "2018-04-17T12:42:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7b8cd96-0245-4e27-acea-452e61d588de", "record_id": "flaws_cloudtrail:0000333:a7b8cd96-0245-4e27-acea-452e61d588de", "row_index": 333, "timestamp": "2018-04-17T12:42:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7b8cd96-0245-4e27-acea-452e61d588de", "eventTime": "2018-04-17T12:42:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6131d77b-2cf0-4b93-b400-f919935ae32ea", "record_id": "flaws_cloudtrail:0000334:6131d77b-2cf0-4b93-b400-f919935ae32ea", "row_index": 334, "timestamp": "2018-04-17T12:42:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6131d77b-2cf0-4b93-b400-f919935ae32ea", "eventTime": "2018-04-17T12:42:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a074369-2f78-4d0a-b5ac-d91f9bd50c9b", "record_id": "flaws_cloudtrail:0000335:a074369-2f78-4d0a-b5ac-d91f9bd50c9b", "row_index": 335, "timestamp": "2018-04-17T12:42:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a074369-2f78-4d0a-b5ac-d91f9bd50c9b", "eventTime": "2018-04-17T12:42:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12a928507-c632-4411-8598-887b023692f4", "record_id": "flaws_cloudtrail:0000336:12a928507-c632-4411-8598-887b023692f4", "row_index": 336, "timestamp": "2018-04-17T12:42:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 2029, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12a928507-c632-4411-8598-887b023692f4", "eventTime": "2018-04-17T12:42:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4zOPagpVcDHd5sSJ-OYHxu5M-8wDLo-UOro5UZiYlh39781C2YYL776YmydUC-tJqZj-VQCiUB9tlypzCiRlSMTjnqSwktU6l7pwpNSW7fWBJb8oASns549sY3u9mH4aabn0x6IBnasOOPxMBOQBcHEVAeJB6w1WLXvW-TgxTnK1wbs2B067l41lB1Bbg05Fxnuyi4URQ5zGObEqqhTXN1qx4rpNxsYXTOCOg_ggvooKWLnKf_pEBQ5hK7V6o7_bBPWGL_xd5A41DG9GqjHdSJ6xkYvwaZ7cIejsiLyhowGky7qg7KfiHQotpReLjfdcpN3zK3ae_ZwFx9b2jgESFWIqGTMBZfx1IBP-1jIiWB2VZYEGr0AnehsTUX8ObFj-fkHp37w33oXaI6b2ULBq_MfTCw5BSNAV8u25NP8XfwmsbEIDRzKRSVYEiMx6tA44QVMQjnwKXJXhs-Xns5SQcnhoZValLiNgEf99dhfQqKBpo3O0YcB-EgMQt_tZR-gTUJ_Nx2OioAD1Wu9eLWYhnv8E20Up_P-B-OtIgLbq1DljBTI4I__rpEx3cRipyjrk5HA3FvfhyTCBLTOrEaA7A_PBvDl1lZUBECKkk-5uNoUU0icE6ehpLQHUPXkAnula4GcsYATxbtkUETi9bkRQQHQZ9yy1xwZ1ZC6Ztg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b84bb145-218f-4492-9823-2a7382b5561b", "record_id": "flaws_cloudtrail:0000337:b84bb145-218f-4492-9823-2a7382b5561b", "row_index": 337, "timestamp": "2018-04-17T12:42:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b84bb145-218f-4492-9823-2a7382b5561b", "eventTime": "2018-04-17T12:42:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875a3067-a323-4ae3-8a39-fd23cdacb35d", "record_id": "flaws_cloudtrail:0000338:875a3067-a323-4ae3-8a39-fd23cdacb35d", "row_index": 338, "timestamp": "2018-04-17T12:42:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875a3067-a323-4ae3-8a39-fd23cdacb35d", "eventTime": "2018-04-17T12:42:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: BPh-Uz3PZ0d118E4OmRU5qrPUfulRFj_vFXQCCYDX_WAJMaZMSrRpzq90YtzulVdzlVrSXINj-pSPEgynYGl5h1e4xba4xPPFAjQS1dnca8ElZ7R6kMV6HXYsGcnycFMUwLduOn1VtUpkX2umioN-0Clk6h3rkBcP6hWVjce3h1-Tx3IrJqC3uhPg8rYmzVQuSaL3U7fQAzwsBjV5XUCMK1XfYEdJ56S1z6-zn03AjHEGHPrJGLOEECz-PhttyPF60tyBYY1q9Mvz4FMIiryEb5pNtKfxpJHONz-wKcXx7o7yqmoJlhb7ON4MsctKcJvdKsEw6XIb-6dKQGZPAX2Y31FSQwhGVbji0b8jaH3bBO253SgfjxCCaSBWgKOXWxBa99m0WTWYpPKdahdHALIdponx__l2QMFkg5HvpYrOtCct8wE6muR_n4qbb5pAXxVDtlq5evBT51X8iA9vC1dTlEyKxJJMltBAgOQ3vPpKtlvWbBkm_-ucc6ooIGutf8zi44nIp5uZBmZrlAGscDcKQ9UUzvL1M795O0LVZHy9TXM97AW5tRXYhmPHvLQvf_c90uy3FV6kihmfKp65aLFpJABjsYGGnWVcUdAs0eB1Jp6dzt8zyC3jYHX-4GXODWh18vNUREhdC4Nj5YFAsZJYBCFXoMinlAFuQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f59e74ce-be84-43e4-a024-136a3d81d330", "record_id": "flaws_cloudtrail:0000339:f59e74ce-be84-43e4-a024-136a3d81d330", "row_index": 339, "timestamp": "2018-04-17T12:42:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f59e74ce-be84-43e4-a024-136a3d81d330", "eventTime": "2018-04-17T12:42:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ff6d96-5e13-4095-9276-ca025bfbde6e", "record_id": "flaws_cloudtrail:0000340:c8ff6d96-5e13-4095-9276-ca025bfbde6e", "row_index": 340, "timestamp": "2018-04-17T12:42:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ff6d96-5e13-4095-9276-ca025bfbde6e", "eventTime": "2018-04-17T12:42:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d44b7cab-d2b3-47a5-ac20-625893cff43", "record_id": "flaws_cloudtrail:0000341:d44b7cab-d2b3-47a5-ac20-625893cff43", "row_index": 341, "timestamp": "2018-04-17T12:42:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d44b7cab-d2b3-47a5-ac20-625893cff43", "eventTime": "2018-04-17T12:42:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640e41e1-6d85-42f2-adaa-295202031908", "record_id": "flaws_cloudtrail:0000342:640e41e1-6d85-42f2-adaa-295202031908", "row_index": 342, "timestamp": "2018-04-17T12:42:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640e41e1-6d85-42f2-adaa-295202031908", "eventTime": "2018-04-17T12:42:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20d4f087-60b7-44bb-b3f7-f6d2921fb585", "record_id": "flaws_cloudtrail:0000343:20d4f087-60b7-44bb-b3f7-f6d2921fb585", "row_index": 343, "timestamp": "2018-04-17T12:42:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20d4f087-60b7-44bb-b3f7-f6d2921fb585", "eventTime": "2018-04-17T12:42:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa4dfc1e-deee-4eb7-95aa-cafa31fc42b5", "record_id": "flaws_cloudtrail:0000344:aa4dfc1e-deee-4eb7-95aa-cafa31fc42b5", "row_index": 344, "timestamp": "2018-04-17T12:42:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa4dfc1e-deee-4eb7-95aa-cafa31fc42b5", "eventTime": "2018-04-17T12:42:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9787c614-614b-4063-87e0-128a2e9686f8", "record_id": "flaws_cloudtrail:0000345:9787c614-614b-4063-87e0-128a2e9686f8", "row_index": 345, "timestamp": "2018-04-17T12:42:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9787c614-614b-4063-87e0-128a2e9686f8", "eventTime": "2018-04-17T12:42:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e7032ff-424c-4046-a117-95d9fbabb335", "record_id": "flaws_cloudtrail:0000346:4e7032ff-424c-4046-a117-95d9fbabb335", "row_index": 346, "timestamp": "2018-04-17T12:42:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e7032ff-424c-4046-a117-95d9fbabb335", "eventTime": "2018-04-17T12:42:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09d4f3cf-d051-4c66-ae24-490da59bbc15", "record_id": "flaws_cloudtrail:0000347:09d4f3cf-d051-4c66-ae24-490da59bbc15", "row_index": 347, "timestamp": "2018-04-17T12:42:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09d4f3cf-d051-4c66-ae24-490da59bbc15", "eventTime": "2018-04-17T12:42:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "830182f02-c020-4946-af83-5d83aca04f21", "record_id": "flaws_cloudtrail:0000348:830182f02-c020-4946-af83-5d83aca04f21", "row_index": 348, "timestamp": "2018-04-17T12:42:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "830182f02-c020-4946-af83-5d83aca04f21", "eventTime": "2018-04-17T12:42:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04d858105-1567-4f96-99a4-6a3db95b8d59", "record_id": "flaws_cloudtrail:0000349:04d858105-1567-4f96-99a4-6a3db95b8d59", "row_index": 349, "timestamp": "2018-04-17T12:42:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04d858105-1567-4f96-99a4-6a3db95b8d59", "eventTime": "2018-04-17T12:42:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c1d525c-ade2-4c02-be90-2c31440ffdbf", "record_id": "flaws_cloudtrail:0000350:2c1d525c-ade2-4c02-be90-2c31440ffdbf", "row_index": 350, "timestamp": "2018-04-17T12:42:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c1d525c-ade2-4c02-be90-2c31440ffdbf", "eventTime": "2018-04-17T12:42:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55dbc39d-ddd1-4ff4-bdad-e06f1a8cbde0", "record_id": "flaws_cloudtrail:0000351:55dbc39d-ddd1-4ff4-bdad-e06f1a8cbde0", "row_index": 351, "timestamp": "2018-04-17T12:42:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55dbc39d-ddd1-4ff4-bdad-e06f1a8cbde0", "eventTime": "2018-04-17T12:42:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34fe0e3d-916b-44aa-9e9b-018c2f522cb9", "record_id": "flaws_cloudtrail:0000352:34fe0e3d-916b-44aa-9e9b-018c2f522cb9", "row_index": 352, "timestamp": "2018-04-17T12:42:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34fe0e3d-916b-44aa-9e9b-018c2f522cb9", "eventTime": "2018-04-17T12:42:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838c7bea-253d-43c0-90ca-4ef76f7d5eb6", "record_id": "flaws_cloudtrail:0000353:838c7bea-253d-43c0-90ca-4ef76f7d5eb6", "row_index": 353, "timestamp": "2018-04-17T12:42:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838c7bea-253d-43c0-90ca-4ef76f7d5eb6", "eventTime": "2018-04-17T12:42:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3b05aad-298f-41e8-874f-61b9a4e824e5", "record_id": "flaws_cloudtrail:0000354:f3b05aad-298f-41e8-874f-61b9a4e824e5", "row_index": 354, "timestamp": "2018-04-17T12:42:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3b05aad-298f-41e8-874f-61b9a4e824e5", "eventTime": "2018-04-17T12:42:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: pTXehPXlauQC8OpkzJofR7OA6keWXs01pTsRVT--Qg9ClG-opzMvQbGxwDGRG0Tx0tWG9BydRBgn-Pw_-7tDs1mLftLZh2PK91o7GvbfbdE3QfUUzR01a-ckNRRTWgIZRwxID-oH8qEV0jk9XNQhGASlMrHbyj-x6xpNPxT9mZhuJKK9_cSmlcIRuuahacKHl3RCIaERKZblrXttGnRPEmCfdP6bHfxfltlAyw6QWgCmry0-zfT8tjAH2nE084IhvQXmCJV_-dznRV-_OCrn-cGaXYhRw57gnBS7thj3gV8HaKiy8lnO8HsTQ-C-emurm1qeXDNpqZ13M9JAg6FW-jqZ42TyJ1HP94o-Ikqx3_z34GfMzuK3UD8DzQ7QdLQBMbL2Jk_iSiumsRDq8MCk46Nf1p_GFphuDLpB87RZ-MV9tZLwVIYMFQWye2PuACcp7rNY9cCkP32ZlsgJs-KkeWYXYJSwP0RQ3iWDi19RLlO6hdv-aSOeR-po7T9XBOpgIhUpW9jNqX0hQA792bBNJq64FZz9QuACph82yp0INquhKeu2BHnaC3Ne_JdWl7qk-eZIGD9k_CZdxqVUF36DYUQ82tV9g_rO2dEsokVtMSRNBGBXm5PuAHMlk9QJhsSTKobKHiY7vgEooAAQKVhMjrSXLxQ1MVWCpRE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84758-1c80-4ffc-bba6-2191b7c8a6cc", "record_id": "flaws_cloudtrail:0000355:84758-1c80-4ffc-bba6-2191b7c8a6cc", "row_index": 355, "timestamp": "2018-04-17T12:42:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84758-1c80-4ffc-bba6-2191b7c8a6cc", "eventTime": "2018-04-17T12:42:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00526-7de1-4817-9987-857475ca7a", "record_id": "flaws_cloudtrail:0000356:00526-7de1-4817-9987-857475ca7a", "row_index": 356, "timestamp": "2018-04-17T12:42:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1325, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00526-7de1-4817-9987-857475ca7a", "eventTime": "2018-04-17T12:42:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acd041f3-f476-4029-9046-810d92007f98", "record_id": "flaws_cloudtrail:0000357:acd041f3-f476-4029-9046-810d92007f98", "row_index": 357, "timestamp": "2018-04-17T12:42:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acd041f3-f476-4029-9046-810d92007f98", "eventTime": "2018-04-17T12:42:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0710f995-e233-4414-b7d0-79c9150fde11", "record_id": "flaws_cloudtrail:0000358:0710f995-e233-4414-b7d0-79c9150fde11", "row_index": 358, "timestamp": "2018-04-17T12:42:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0710f995-e233-4414-b7d0-79c9150fde11", "eventTime": "2018-04-17T12:42:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df7586b-2135-4f16-a303-b5d068d5a425", "record_id": "flaws_cloudtrail:0000359:5df7586b-2135-4f16-a303-b5d068d5a425", "row_index": 359, "timestamp": "2018-04-17T12:42:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1372, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df7586b-2135-4f16-a303-b5d068d5a425", "eventTime": "2018-04-17T12:42:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72763b4b-bcde-4bf1-8379-c38d7c99034c", "record_id": "flaws_cloudtrail:0000360:72763b4b-bcde-4bf1-8379-c38d7c99034c", "row_index": 360, "timestamp": "2018-04-17T12:42:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72763b4b-bcde-4bf1-8379-c38d7c99034c", "eventTime": "2018-04-17T12:42:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033bc584-2e52-4a8d-9783-e5c4b4acf714", "record_id": "flaws_cloudtrail:0000361:033bc584-2e52-4a8d-9783-e5c4b4acf714", "row_index": 361, "timestamp": "2018-04-17T12:42:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033bc584-2e52-4a8d-9783-e5c4b4acf714", "eventTime": "2018-04-17T12:42:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db8289ac-6c35-41ce-83a0-0a62fa061fe5", "record_id": "flaws_cloudtrail:0000362:db8289ac-6c35-41ce-83a0-0a62fa061fe5", "row_index": 362, "timestamp": "2018-04-17T12:42:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db8289ac-6c35-41ce-83a0-0a62fa061fe5", "eventTime": "2018-04-17T12:42:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "053cf9bf-808e-4afb-88b8-e9ac71739f3b", "record_id": "flaws_cloudtrail:0000363:053cf9bf-808e-4afb-88b8-e9ac71739f3b", "row_index": 363, "timestamp": "2018-04-17T12:42:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "053cf9bf-808e-4afb-88b8-e9ac71739f3b", "eventTime": "2018-04-17T12:42:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43e6f579-7bd6-472a-a868-86fde22b557e", "record_id": "flaws_cloudtrail:0000364:43e6f579-7bd6-472a-a868-86fde22b557e", "row_index": 364, "timestamp": "2018-04-17T12:42:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43e6f579-7bd6-472a-a868-86fde22b557e", "eventTime": "2018-04-17T12:42:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: NHFNtcntt-Z4ESZsXrAglOXyzpHtbuVs0_2q2OPXTqRdiq99jSN23o_QnilMeB6DdE_wOS1FeorSAIPa8dvsPSbRaW8-_qYnIF2Ou1McjFb8jQmLwdNmiFeEZCJ1mQrpXX0G-ngQdRylSAnFLQPX3vTCB9o27cD7RDn3IRdm_7CVSCGbRGg0eCEUhSIdblXdfzxQJiX1dus0kuU5AOlcVWvfheKzA133LUg7ZYTxj7IZl_zZ92PmOGwZYYax72jtL-0jHgBBIv-4VqVzEJRW4qCUU1nRpvRrPNPh_iRaMSbVZQoIU2qnIxjnY7WC2IX5mU99k38s4bHbCYjwIKO9STS6rTdd7DOFFyRNglx9MR-79P71wInqKpLTOkx5jDDBOegj94C1HH4sqQLG0yESzvHFVP2uU7C5f02tJnYnDheBE5tKHCZridFQ1sctZENFT7RO-7Ovt5C8tnSEXE8KGWXOe4Cd4gZTVOq_Sm9fPL1S9r-vlekYgrJ79JUtLsm64tvI0BBF9Gv46duJl0W2-UguIjC0rQQQmBow6S7fmpiPb3ebbRdfgvXU5Tosrxra2HNfSPHB1dSz-LExfs-NvgkfOPFQdLrrFduySC2PtM45BGzUEklyDYA8_autOwpxk_5lPMZ0E3HIZebd2V1cUmJ75O5R0JQzv_g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25a0be7f-9ec9-4ac7-b103-3dad7e4a5a2b", "record_id": "flaws_cloudtrail:0000365:25a0be7f-9ec9-4ac7-b103-3dad7e4a5a2b", "row_index": 365, "timestamp": "2018-04-17T12:42:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1931, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25a0be7f-9ec9-4ac7-b103-3dad7e4a5a2b", "eventTime": "2018-04-17T12:42:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mlF2SKEPLjjbUQWWy8K0mw_grwRDaDCc14Aif649AK1EfNeUJE7XnRwbVSvL9MroiFOpER-Cq90TCIftcaq8vrlJH5VPtfCd0i9kufxTtP4x6ths4Pl1rFnVsOoGXjRPAwhTAcrNwtlA7dMMqEjHr5j0xY13cMkr0QYZTBawYXtJ-DOGqKtOwKu2L4acXgy1rxx9poordZT-OnGDTrYbmWu1HGMbnPWtrV-atlVN5Mp4Yr5LKjWAXCo8DLe3C-DlMdr9Bm2XzsYqt3DE4-frsIij0HLRq5Iny1GiJXNvvAL3t7iGab2g0ZS9hDpzOOUJiaX4wJEYM9kRSGvNjSpczRoUc9Q1GNMv6YrvDUNeMAdUAambePcH7MRUkh3K1tLarHcDVy--VUPl7BpLiJHlhBDcEl1-y7Wbf0761Z0moxoo86kAJMcIbrBkI1zezA3FGYQnUSrT2nCedupMOQa1uNx4OKpcXPR_ouA0vVctkE1lLTVyc8lmnr6fOjQA5eFC9x6639_2PxovW703agZASc26l7Y8IC1wM5fPs0bLV0Fk2pmOgd3ekgmvmHrWot-qiwWgzVBzswjt5O9SPXqcG2I9Ct2NOE3HyHS38HfMc2ru5253sIb4U4LM2UclaqeCJEpn4nMNBJbGAZNLIsxhm0ZUKwfj2B5D7RHt", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfa557b2-ae15-4f67-9e8a-f189269b6087", "record_id": "flaws_cloudtrail:0000366:bfa557b2-ae15-4f67-9e8a-f189269b6087", "row_index": 366, "timestamp": "2018-04-17T12:42:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfa557b2-ae15-4f67-9e8a-f189269b6087", "eventTime": "2018-04-17T12:42:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30c683a-1a57-484c-8b7f-fa55cdba9ec7", "record_id": "flaws_cloudtrail:0000367:d30c683a-1a57-484c-8b7f-fa55cdba9ec7", "row_index": 367, "timestamp": "2018-04-17T12:42:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30c683a-1a57-484c-8b7f-fa55cdba9ec7", "eventTime": "2018-04-17T12:42:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "849e8a24-4f23-4aae-9277-ce98d0b204ee", "record_id": "flaws_cloudtrail:0000368:849e8a24-4f23-4aae-9277-ce98d0b204ee", "row_index": 368, "timestamp": "2018-04-17T12:42:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "849e8a24-4f23-4aae-9277-ce98d0b204ee", "eventTime": "2018-04-17T12:42:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e491cb3-dee3-40c6-96c3-8b8ad4876c54", "record_id": "flaws_cloudtrail:0000369:8e491cb3-dee3-40c6-96c3-8b8ad4876c54", "row_index": 369, "timestamp": "2018-04-17T12:42:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e491cb3-dee3-40c6-96c3-8b8ad4876c54", "eventTime": "2018-04-17T12:42:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fba75d1-207b-4679-8f4a-faadb22ed9e9", "record_id": "flaws_cloudtrail:0000370:7fba75d1-207b-4679-8f4a-faadb22ed9e9", "row_index": 370, "timestamp": "2018-04-17T12:42:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fba75d1-207b-4679-8f4a-faadb22ed9e9", "eventTime": "2018-04-17T12:42:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d8462e-b390-4bc7-8f96-a0cc9b3e1f4d", "record_id": "flaws_cloudtrail:0000371:b0d8462e-b390-4bc7-8f96-a0cc9b3e1f4d", "row_index": 371, "timestamp": "2018-04-17T12:42:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d8462e-b390-4bc7-8f96-a0cc9b3e1f4d", "eventTime": "2018-04-17T12:42:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0a4e54-9acd-4760-b5a0-9dc06f23668a", "record_id": "flaws_cloudtrail:0000372:fa0a4e54-9acd-4760-b5a0-9dc06f23668a", "row_index": 372, "timestamp": "2018-04-17T12:42:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1267, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0a4e54-9acd-4760-b5a0-9dc06f23668a", "eventTime": "2018-04-17T12:42:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25715aa-f28a-4f22-aaba-3094ea782aee", "record_id": "flaws_cloudtrail:0000373:25715aa-f28a-4f22-aaba-3094ea782aee", "row_index": 373, "timestamp": "2018-04-17T12:42:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25715aa-f28a-4f22-aaba-3094ea782aee", "eventTime": "2018-04-17T12:42:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dde0422-9cf8-4bf6-b5a6-d22eb175efde", "record_id": "flaws_cloudtrail:0000374:8dde0422-9cf8-4bf6-b5a6-d22eb175efde", "row_index": 374, "timestamp": "2018-04-17T12:42:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dde0422-9cf8-4bf6-b5a6-d22eb175efde", "eventTime": "2018-04-17T12:42:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6d1b1d1-ddf1-4257-810e-fa01861ce42d", "record_id": "flaws_cloudtrail:0000375:e6d1b1d1-ddf1-4257-810e-fa01861ce42d", "row_index": 375, "timestamp": "2018-04-17T12:42:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6d1b1d1-ddf1-4257-810e-fa01861ce42d", "eventTime": "2018-04-17T12:42:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41dd2db0-fe52-49f0-a82c-d4a4e9515062", "record_id": "flaws_cloudtrail:0000376:41dd2db0-fe52-49f0-a82c-d4a4e9515062", "row_index": 376, "timestamp": "2018-04-17T12:42:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41dd2db0-fe52-49f0-a82c-d4a4e9515062", "eventTime": "2018-04-17T12:42:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd69c308-54d5-470d-800b-0564f44626ed", "record_id": "flaws_cloudtrail:0000377:fd69c308-54d5-470d-800b-0564f44626ed", "row_index": 377, "timestamp": "2018-04-17T12:42:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd69c308-54d5-470d-800b-0564f44626ed", "eventTime": "2018-04-17T12:42:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: okWiPNhGwey_5FNvYqrVGy2sTmMSb2s-H3lslR3bOHOW0VZOBS63fvND2j-ZSXEBkoO7fmty3aMa85KTwBbvfTuaykk_ntem0C72xmMzxGOqbND7Wlx1z_ijdR-PC0hpcMZh6p1S747dMoArTgTkMa1H7RMxgFZGsx3E645Ze73WiSC4N14CEndCHzEgyBf7syNyxKJfLD95j0z83mFC0UG8M9KVu9dYazNyTniHOdx2ICANYv9nWOatLvj_-kNyh4zhoRXCI-bMB9nhw0_Rn1bKIkPma9YtQuPynx9Unha8ZfcjkOQWPjREuUGF3A6-2q5IJhQnoVejTBvopF0fx5AKeNoyTqKwKH_-_czGbwuuTVOobI2_K0jAIpoXRz6WpXq01RipXvYw09FJIdErEUsSJ-zBI85CmUTpagKmWmTuhCihZZX3K2yI4bp339Huoz7Mof3gPQ5PCmr9qTrhLMjyrOiGGskce2OgZejp27bC5B-fvP2rn0DTjdWbRwt4xeKB5xiZk8cTYsSeEZ3n82amMYgZo2_r8URrlE3Ox9ZNATawQj1hCh0xgtl0UuXxmfpGTPdY0G41iZGdKUJlgETdV2I-SlzrlSDkTAxuViK74p5RdB1gjJiVCL0f5DnUmUoh7Rgq_rVXH0lo8hw8Fqf-EBiNLPBGrQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "977f2c02-25b6-4bc4-a97b-7677221046a6", "record_id": "flaws_cloudtrail:0000378:977f2c02-25b6-4bc4-a97b-7677221046a6", "row_index": 378, "timestamp": "2018-04-17T12:42:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "977f2c02-25b6-4bc4-a97b-7677221046a6", "eventTime": "2018-04-17T12:42:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d93f1c8-8c95-4b28-af22-6d2e065ff4c7", "record_id": "flaws_cloudtrail:0000379:7d93f1c8-8c95-4b28-af22-6d2e065ff4c7", "row_index": 379, "timestamp": "2018-04-17T12:42:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d93f1c8-8c95-4b28-af22-6d2e065ff4c7", "eventTime": "2018-04-17T12:42:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "381de1f0-634b-4487-af0f-e729f1a67c32", "record_id": "flaws_cloudtrail:0000380:381de1f0-634b-4487-af0f-e729f1a67c32", "row_index": 380, "timestamp": "2018-04-17T12:42:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "381de1f0-634b-4487-af0f-e729f1a67c32", "eventTime": "2018-04-17T12:42:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "217510f0-78f5-43df-aba1-d646144b29a8", "record_id": "flaws_cloudtrail:0000381:217510f0-78f5-43df-aba1-d646144b29a8", "row_index": 381, "timestamp": "2018-04-17T12:42:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "217510f0-78f5-43df-aba1-d646144b29a8", "eventTime": "2018-04-17T12:42:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8459b09d-b178-4636-b734-2c5a99c733b1", "record_id": "flaws_cloudtrail:0000382:8459b09d-b178-4636-b734-2c5a99c733b1", "row_index": 382, "timestamp": "2018-04-17T12:42:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8459b09d-b178-4636-b734-2c5a99c733b1", "eventTime": "2018-04-17T12:42:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0e385081-2b58-4656-b3f1-c899128dcefda", "record_id": "flaws_cloudtrail:0000383:c0e385081-2b58-4656-b3f1-c899128dcefda", "row_index": 383, "timestamp": "2018-04-17T12:42:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0e385081-2b58-4656-b3f1-c899128dcefda", "eventTime": "2018-04-17T12:42:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cry8df2mwJ37m8F5LfjjucT6XkvbWs2FcQCmUGKlAuJDrm8APOGsdNVUhmuSf2GMT7LfXyZJgA-fSQ90xSdrxAMrQk4_ayKOuMCs-HQrPMkXxNkpXh-00Lin9ZSL9Ou2qwAYmphMUqiZRubz1_huXks11D-ULBT3K_Czunfp6AITjqlYbDQc6wIrteQh4EvnJtxdKDMYNOLuzs26em7KlMhZFMH4lJnciIb4ztENcu-KSfbkOzlvffKOHAzZ6LT86DzsuwcPVLYt7OU9TJLxnGIM4IOToxYBy2CwyjHf9wzWfVNBQGTcm7FR4pGCIUglWtLwGB1AnU8nZog2LOztjLve44U_FWwoE1aY-gY4Yi9Vr9u0Xgf53uIs6RQVa07Q30vWoTPaC-Czon4QEnw7HQdG7nbCZTUNLsI088eBe7XINsR9PDsq2OxSbHHPUc8ouyPxRpM8FbzYyY2RmXzfgFqrLf4oR8jGRh3BomZPAdeV4kuXCgLx9UlK2H_XO2hqJyeLlrk9ttLFv3bG7_QysI4h7DEhxKcv9R4mb9wgdd6fdWmOGY4ussNkxrlsnFQfGwhlZQRToWIuWFZmYlcKfh6n_LE1W8uQHgARTxPVEmLpQoBhB4vZmmAetPGrwbRalfJTSLlN0Mzphqjh25PL_6p9DSnf0t3e2w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f96715-1977-4495-81e7-92991b1c50", "record_id": "flaws_cloudtrail:0000384:17f96715-1977-4495-81e7-92991b1c50", "row_index": 384, "timestamp": "2018-04-17T12:42:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1268, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f96715-1977-4495-81e7-92991b1c50", "eventTime": "2018-04-17T12:42:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e151f17-234d-4387-858c-e7d3af30bc20", "record_id": "flaws_cloudtrail:0000385:9e151f17-234d-4387-858c-e7d3af30bc20", "row_index": 385, "timestamp": "2018-04-17T12:42:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e151f17-234d-4387-858c-e7d3af30bc20", "eventTime": "2018-04-17T12:42:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5V6qRAJOycoBwuVS1mkX-gf9fCOCzw-BPGIsxuEUcLEQloSd84O-ib5YOeQPw1AF5EEpAV5KiGV4negl7ml-2-9XJ9f-AU1BQxmfiA5fNV28Lez3LnMN2J6FJTMP0ql4Tc5qmCeFTCS6uMAd0OhUWReoJg0b8QO0xC8rXbKfYWhTXl1OVqWwwCbWi8sMdsHkfohBggNw52FXV72CMfJTHtv63fx79WAXwLkbjFCMxBg0bnJYwmr5bQ957Nqc2FD2MVpmn1PrUqAFn7crBBll2A6bBKyzNIetOoMZG6w-gsJKQaAFVbJMk1wQU3uY4J8GBt1vjIndZQHLXqcbUv8dYsM5Pd8xupaYm7OSBEzOfy-4Hpbf6O0iW_YLDmKG9Cm5vmuP7NanY2fOzsuDCo5KL0h6mirIABUi7-zMebrRbPfXq_jPhvSy_MBf4sFXLk0ykVAwjWUEzjZGF32JWG7vt6lIAyTs6sLPntWiitkgRZdTpq9AgUmOy7-640haVnUWSkd4mKJxvD5DIWK58m1DHZQAlDA2L33nYEzRPcNBxMjj0sZaKU22i_gUcRzhhATbjloUBomio1Yzy_O2faM0gv4HMD-ItDyesa_jNS0WagxUzoJPwIWfzumdwvs-8Yb3PiZx_-sIvyVp-15jB-nbLj_lMV3ukP_JbOQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166d78db-dbfa-4f43-a366-6c079ec27e08", "record_id": "flaws_cloudtrail:0000386:166d78db-dbfa-4f43-a366-6c079ec27e08", "row_index": 386, "timestamp": "2018-04-17T12:42:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166d78db-dbfa-4f43-a366-6c079ec27e08", "eventTime": "2018-04-17T12:42:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6bf8efc-c980-43ac-9fec-a9441592a3aa", "record_id": "flaws_cloudtrail:0000387:f6bf8efc-c980-43ac-9fec-a9441592a3aa", "row_index": 387, "timestamp": "2018-04-17T12:42:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6bf8efc-c980-43ac-9fec-a9441592a3aa", "eventTime": "2018-04-17T12:42:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a4a693-c1cf-4bc5-9174-52f4e02a80b3", "record_id": "flaws_cloudtrail:0000388:a4a4a693-c1cf-4bc5-9174-52f4e02a80b3", "row_index": 388, "timestamp": "2018-04-17T12:42:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a4a693-c1cf-4bc5-9174-52f4e02a80b3", "eventTime": "2018-04-17T12:42:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa10e53d-f1f6-4f0b-a796-193a3d2a5a48", "record_id": "flaws_cloudtrail:0000389:fa10e53d-f1f6-4f0b-a796-193a3d2a5a48", "row_index": 389, "timestamp": "2018-04-17T12:43:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa10e53d-f1f6-4f0b-a796-193a3d2a5a48", "eventTime": "2018-04-17T12:43:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717cf423-4f7e-41dc-a7e4-d4676d7b8c68", "record_id": "flaws_cloudtrail:0000390:717cf423-4f7e-41dc-a7e4-d4676d7b8c68", "row_index": 390, "timestamp": "2018-04-17T12:43:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717cf423-4f7e-41dc-a7e4-d4676d7b8c68", "eventTime": "2018-04-17T12:43:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba7703e2-94d3-4138-b1b8-45e39490e37a", "record_id": "flaws_cloudtrail:0000391:ba7703e2-94d3-4138-b1b8-45e39490e37a", "row_index": 391, "timestamp": "2018-04-17T12:43:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba7703e2-94d3-4138-b1b8-45e39490e37a", "eventTime": "2018-04-17T12:43:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "762789b5c-88aa-450c-af4d-d2c5764b35aa", "record_id": "flaws_cloudtrail:0000392:762789b5c-88aa-450c-af4d-d2c5764b35aa", "row_index": 392, "timestamp": "2018-04-17T12:43:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1333, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "762789b5c-88aa-450c-af4d-d2c5764b35aa", "eventTime": "2018-04-17T12:43:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44109f01-a8d6-4ecf-8b48-69385dd7b722", "record_id": "flaws_cloudtrail:0000393:44109f01-a8d6-4ecf-8b48-69385dd7b722", "row_index": 393, "timestamp": "2018-04-17T12:43:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44109f01-a8d6-4ecf-8b48-69385dd7b722", "eventTime": "2018-04-17T12:43:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f41857e-2865-4ba0-869f-1433fe027adf", "record_id": "flaws_cloudtrail:0000394:6f41857e-2865-4ba0-869f-1433fe027adf", "row_index": 394, "timestamp": "2018-04-17T12:43:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f41857e-2865-4ba0-869f-1433fe027adf", "eventTime": "2018-04-17T12:43:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e525e613-f45b-40ad-b5e2-33ca3e5e0697", "record_id": "flaws_cloudtrail:0000395:e525e613-f45b-40ad-b5e2-33ca3e5e0697", "row_index": 395, "timestamp": "2018-04-17T12:43:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e525e613-f45b-40ad-b5e2-33ca3e5e0697", "eventTime": "2018-04-17T12:43:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25593e4-dbb0-405e-a573-ef55d4e54fac", "record_id": "flaws_cloudtrail:0000396:25593e4-dbb0-405e-a573-ef55d4e54fac", "row_index": 396, "timestamp": "2018-04-17T12:43:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25593e4-dbb0-405e-a573-ef55d4e54fac", "eventTime": "2018-04-17T12:43:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fce0b554-fe66-4c89-88b9-966133ebcf8", "record_id": "flaws_cloudtrail:0000397:fce0b554-fe66-4c89-88b9-966133ebcf8", "row_index": 397, "timestamp": "2018-04-17T12:44:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fce0b554-fe66-4c89-88b9-966133ebcf8", "eventTime": "2018-04-17T12:44:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcbbdf6-5ebd-45e6-8f98-c2de1d6133b2", "record_id": "flaws_cloudtrail:0000398:efcbbdf6-5ebd-45e6-8f98-c2de1d6133b2", "row_index": 398, "timestamp": "2018-04-17T12:44:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcbbdf6-5ebd-45e6-8f98-c2de1d6133b2", "eventTime": "2018-04-17T12:44:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rciYQDAs7QszPN65UIcRox94gv3fV3-owZPB8FIHGpbuS-Ochjjj7LLhbj9tSZk1bKknPgBsC5tYiftn5pM_anDsltGEPy7KsMTQtgZCLkr8teuOkJ5AuM0P2u1gl9zTo_wDsQFI5qLvuAAlHN_H_MvbAFXwLFuTWfZtItvfB_9bNAImjyrRPnhFRY8RKd4JqVCp_9ENvnE3D7thk8bTzES89xTcdoxuxsrb1eE24GQZ017lfVilc3b16oLIeXv3h__JOwcJCBUrVXjojHQEB581znHmDbCC9YJwMAw00L3-iGyOqpgHGrxcJD2htojtPI7qWrtlcES4DxRvaZ_hYx4wnkfZ2EDQXERmakat2ZZxEg003CHEl9q4bFsvkrGVNENmz3FsvK2c6rC6jeQ69HJzq-7c5azq35M91_CLEIy3vnGDuq7L6yRkZWWwD1Rlwx6xMT-LWLiBTsc2ixk-sMl-Pk0dRSOplTdCcymRyELabZy0eyxxuvfbEObgG_o0m9VCaMcoPf02diCg9zDJRSNl1VTEkJWRC5NuCC9mNGcMI2dLFuWHb2yxVQdvYGetDDXNvcXf9B0p5I2VSEM1MSYRU-M9VLwg60U6AxACpALRdOciMvKQWY2bWlXybsNU8HGB6sE04btOhY8BScMZICMK_tDJB0wigg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "286144-b05d-4381-9059-3a6f300cd08a", "record_id": "flaws_cloudtrail:0000399:286144-b05d-4381-9059-3a6f300cd08a", "row_index": 399, "timestamp": "2018-04-17T12:44:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "286144-b05d-4381-9059-3a6f300cd08a", "eventTime": "2018-04-17T12:44:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e2d0aa-c251-4d9a-90b9-e609948f936149", "record_id": "flaws_cloudtrail:0000400:86e2d0aa-c251-4d9a-90b9-e609948f936149", "row_index": 400, "timestamp": "2018-04-17T12:51:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e2d0aa-c251-4d9a-90b9-e609948f936149", "eventTime": "2018-04-17T12:51:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATQJRQTYX1T39Y4F1", "expiration": "Apr 17, 2018 7:16:23 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dfa2e4f-2d7c-4031-9930-94bd0a90c828", "record_id": "flaws_cloudtrail:0000401:6dfa2e4f-2d7c-4031-9930-94bd0a90c828", "row_index": 401, "timestamp": "2018-04-17T13:22:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dfa2e4f-2d7c-4031-9930-94bd0a90c828", "eventTime": "2018-04-17T13:22:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "267f9da6-92ff-45da-9cef-a2693a005b89", "record_id": "flaws_cloudtrail:0000402:267f9da6-92ff-45da-9cef-a2693a005b89", "row_index": 402, "timestamp": "2018-04-17T13:22:13Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "267f9da6-92ff-45da-9cef-a2693a005b89", "eventTime": "2018-04-17T13:22:13Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afedb7d5-7feb-4864-a02d-2574ee39c90b", "record_id": "flaws_cloudtrail:0000403:afedb7d5-7feb-4864-a02d-2574ee39c90b", "row_index": 403, "timestamp": "2018-04-17T13:22:13Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afedb7d5-7feb-4864-a02d-2574ee39c90b", "eventTime": "2018-04-17T13:22:13Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399c6877-4e74-4bf3-b617-ec521890ab", "record_id": "flaws_cloudtrail:0000404:399c6877-4e74-4bf3-b617-ec521890ab", "row_index": 404, "timestamp": "2018-04-17T13:22:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399c6877-4e74-4bf3-b617-ec521890ab", "eventTime": "2018-04-17T13:22:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fece2b4d-0e93-451e-8925-b1cd550262f5", "record_id": "flaws_cloudtrail:0000405:fece2b4d-0e93-451e-8925-b1cd550262f5", "row_index": 405, "timestamp": "2018-04-17T13:22:14Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fece2b4d-0e93-451e-8925-b1cd550262f5", "eventTime": "2018-04-17T13:22:14Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13471f2c-aa07-4124-ab62-4956a4ff48b1", "record_id": "flaws_cloudtrail:0000406:13471f2c-aa07-4124-ab62-4956a4ff48b1", "row_index": 406, "timestamp": "2018-04-17T13:22:14Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13471f2c-aa07-4124-ab62-4956a4ff48b1", "eventTime": "2018-04-17T13:22:14Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f196b1a-21d7-4121-9924-8134dbc152a9", "record_id": "flaws_cloudtrail:0000407:5f196b1a-21d7-4121-9924-8134dbc152a9", "row_index": 407, "timestamp": "2018-04-17T13:22:14Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f196b1a-21d7-4121-9924-8134dbc152a9", "eventTime": "2018-04-17T13:22:14Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d80b90-1cb9-44c0-93d0-515d069d388c", "record_id": "flaws_cloudtrail:0000408:65d80b90-1cb9-44c0-93d0-515d069d388c", "row_index": 408, "timestamp": "2018-04-17T13:22:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d80b90-1cb9-44c0-93d0-515d069d388c", "eventTime": "2018-04-17T13:22:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93729f-1c80-46e4-a3c1-e878953efe1d", "record_id": "flaws_cloudtrail:0000409:93729f-1c80-46e4-a3c1-e878953efe1d", "row_index": 409, "timestamp": "2018-04-17T13:22:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93729f-1c80-46e4-a3c1-e878953efe1d", "eventTime": "2018-04-17T13:22:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa8da3c1-4493-4014-a581-78096eea7620", "record_id": "flaws_cloudtrail:0000410:fa8da3c1-4493-4014-a581-78096eea7620", "row_index": 410, "timestamp": "2018-04-17T13:22:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa8da3c1-4493-4014-a581-78096eea7620", "eventTime": "2018-04-17T13:22:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17a5ebfb-e34b-4699-965a-ef3defd4ee73", "record_id": "flaws_cloudtrail:0000411:17a5ebfb-e34b-4699-965a-ef3defd4ee73", "row_index": 411, "timestamp": "2018-04-17T13:22:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17a5ebfb-e34b-4699-965a-ef3defd4ee73", "eventTime": "2018-04-17T13:22:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a70ca4-8475-499f-a6c1-ef2ff6b6b4b0", "record_id": "flaws_cloudtrail:0000412:83a70ca4-8475-499f-a6c1-ef2ff6b6b4b0", "row_index": 412, "timestamp": "2018-04-17T13:22:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a70ca4-8475-499f-a6c1-ef2ff6b6b4b0", "eventTime": "2018-04-17T13:22:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5654fbd-d034-43b7-b1fa-8b526214e5e7", "record_id": "flaws_cloudtrail:0000413:a5654fbd-d034-43b7-b1fa-8b526214e5e7", "row_index": 413, "timestamp": "2018-04-17T13:22:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5654fbd-d034-43b7-b1fa-8b526214e5e7", "eventTime": "2018-04-17T13:22:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "736767c5-4a23-438c-9c10-cd3b2b98f19b", "record_id": "flaws_cloudtrail:0000414:736767c5-4a23-438c-9c10-cd3b2b98f19b", "row_index": 414, "timestamp": "2018-04-17T13:22:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "736767c5-4a23-438c-9c10-cd3b2b98f19b", "eventTime": "2018-04-17T13:22:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dde0e4a-d789-419f-8baf-11a5ba9b5f54", "record_id": "flaws_cloudtrail:0000415:7dde0e4a-d789-419f-8baf-11a5ba9b5f54", "row_index": 415, "timestamp": "2018-04-17T13:22:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dde0e4a-d789-419f-8baf-11a5ba9b5f54", "eventTime": "2018-04-17T13:22:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b84f5ac9-2d1f-4070-a296-e0caffa9ab60", "record_id": "flaws_cloudtrail:0000416:b84f5ac9-2d1f-4070-a296-e0caffa9ab60", "row_index": 416, "timestamp": "2018-04-17T13:22:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b84f5ac9-2d1f-4070-a296-e0caffa9ab60", "eventTime": "2018-04-17T13:22:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14d104d1-556e-4b60-92e5-f96b64fb49d0", "record_id": "flaws_cloudtrail:0000417:14d104d1-556e-4b60-92e5-f96b64fb49d0", "row_index": 417, "timestamp": "2018-04-17T13:22:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14d104d1-556e-4b60-92e5-f96b64fb49d0", "eventTime": "2018-04-17T13:22:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4494a4eb-2c4b-4dfd-bc8e-6403b1e9b454", "record_id": "flaws_cloudtrail:0000418:4494a4eb-2c4b-4dfd-bc8e-6403b1e9b454", "row_index": 418, "timestamp": "2018-04-17T13:22:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4494a4eb-2c4b-4dfd-bc8e-6403b1e9b454", "eventTime": "2018-04-17T13:22:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb6a0a99-d14e-47a0-9d27-2dd5cd4192f5", "record_id": "flaws_cloudtrail:0000419:fb6a0a99-d14e-47a0-9d27-2dd5cd4192f5", "row_index": 419, "timestamp": "2018-04-17T13:22:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb6a0a99-d14e-47a0-9d27-2dd5cd4192f5", "eventTime": "2018-04-17T13:22:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba2ebe6-bf54-4976-aafd-4c63985f9747", "record_id": "flaws_cloudtrail:0000420:8ba2ebe6-bf54-4976-aafd-4c63985f9747", "row_index": 420, "timestamp": "2018-04-17T13:22:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba2ebe6-bf54-4976-aafd-4c63985f9747", "eventTime": "2018-04-17T13:22:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c9d92fb-23c7-4242-9953-714b366a4beb", "record_id": "flaws_cloudtrail:0000421:5c9d92fb-23c7-4242-9953-714b366a4beb", "row_index": 421, "timestamp": "2018-04-17T13:22:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c9d92fb-23c7-4242-9953-714b366a4beb", "eventTime": "2018-04-17T13:22:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3ce115-6bb9-4632-9040-0b7237af5384", "record_id": "flaws_cloudtrail:0000422:2b3ce115-6bb9-4632-9040-0b7237af5384", "row_index": 422, "timestamp": "2018-04-17T13:22:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3ce115-6bb9-4632-9040-0b7237af5384", "eventTime": "2018-04-17T13:22:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5473ca48-883a-4e52-babb-475cb3c1696f", "record_id": "flaws_cloudtrail:0000423:5473ca48-883a-4e52-babb-475cb3c1696f", "row_index": 423, "timestamp": "2018-04-17T13:22:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5473ca48-883a-4e52-babb-475cb3c1696f", "eventTime": "2018-04-17T13:22:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef371ff-d16b-4e02-bc98-5940bcded799", "record_id": "flaws_cloudtrail:0000424:eef371ff-d16b-4e02-bc98-5940bcded799", "row_index": 424, "timestamp": "2018-04-17T13:22:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef371ff-d16b-4e02-bc98-5940bcded799", "eventTime": "2018-04-17T13:22:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c215399-e9f9-4636-8538-185845bb7e739", "record_id": "flaws_cloudtrail:0000425:9c215399-e9f9-4636-8538-185845bb7e739", "row_index": 425, "timestamp": "2018-04-17T13:22:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1383, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c215399-e9f9-4636-8538-185845bb7e739", "eventTime": "2018-04-17T13:22:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c625644-d801-45c4-93c4-edf6bde6c135", "record_id": "flaws_cloudtrail:0000426:8c625644-d801-45c4-93c4-edf6bde6c135", "row_index": 426, "timestamp": "2018-04-17T13:22:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c625644-d801-45c4-93c4-edf6bde6c135", "eventTime": "2018-04-17T13:22:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fe9109b-65cb-4c31-a9ee-b4a66564e257", "record_id": "flaws_cloudtrail:0000427:8fe9109b-65cb-4c31-a9ee-b4a66564e257", "row_index": 427, "timestamp": "2018-04-17T13:22:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fe9109b-65cb-4c31-a9ee-b4a66564e257", "eventTime": "2018-04-17T13:22:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4df6_KZhtBPsFHLivvOLu9gfCsK1sv9gQhNaw57TdUqXA5U5KFuZ-LDJtQmnjNHwm5Jd_13LzUoCbLjENSeTf1hRdrC0ZJqoq_2OwWx0iE5QqB2Q3SZk9tsDlcfOc5nq61_Ltra_IgpxFdpevPHZbNgqbfEeYPU1wYtY4DD4zV3klkCkrHI8sMfI7H6xJWGg7TPCq7SkvZwGhZdgUNfn2rNRBMkbTSoRena1vZ0aYmmIjWTw0t9GAA0Z0xGEjhL8hjzzLx0tkPr5KKLHFmbWqGLzvUIshhtqmQoV1iXO1OWV_djzYW3yXoL1MBETz9oQNBOpdZV5CPXTxk8ISTcWZfm1lpRzQLOjtuVJS3bIHPA5Mzxdgu1-XzSy5w4KVDT3T_4XL0nwiHBwo6NIf0OPFzjT3oUrLpcSmd3e05OOL1Gh9_3CP-UGDj8cjc15Cb78zQIY2a7nMEfw6-RhNFPMtATxhggPRONf9_Figvxb50VEZtxik2psxdjsspCZDJkfyAcJWKoGAChJW2m4t9Jzp_2fQxzWoi6FGBM1BOTh--q2aXtGylCpn9HMtw7ucq2HeOg7MKd9z1Z7c5wS7xCSkmh9i5N7OWR9rEG1HU_f-7RQJFB5MxaeKcLc6EKUF37C0zfVNKix5aMhFiqgNRrndpzLUIKaUdtH9WA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9ba0d3a-705f-40ba-acd5-8653fecd1e8b", "record_id": "flaws_cloudtrail:0000428:d9ba0d3a-705f-40ba-acd5-8653fecd1e8b", "row_index": 428, "timestamp": "2018-04-17T13:22:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9ba0d3a-705f-40ba-acd5-8653fecd1e8b", "eventTime": "2018-04-17T13:22:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f21f66ed-39ff-4772-a1a0-6aa32bed0753", "record_id": "flaws_cloudtrail:0000429:f21f66ed-39ff-4772-a1a0-6aa32bed0753", "row_index": 429, "timestamp": "2018-04-17T13:22:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f21f66ed-39ff-4772-a1a0-6aa32bed0753", "eventTime": "2018-04-17T13:22:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fe20ddf-6e25-42b6-9406-27f0b096ca41", "record_id": "flaws_cloudtrail:0000430:7fe20ddf-6e25-42b6-9406-27f0b096ca41", "row_index": 430, "timestamp": "2018-04-17T13:22:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fe20ddf-6e25-42b6-9406-27f0b096ca41", "eventTime": "2018-04-17T13:22:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: af1CIEkPOkssdk7nhT9AaNVxRmu6A2Mvxd8iHXcFp3VjI9N-kFbjhWByHwd-clXbK5zg-rCbXg-h-uJG5IZq8o0k3OALs8zzzTl7l0JyR0Bf6v2lGlANd_CuvUT2joV2jwveFazN_ODczAPigZzBNYV9Qa3yyEgx8pwAl0NFYqwhyhGyjruWkJtU-Y3e26zekw_wSriATcokYMP23dJ-ZTq-sTAljx9T6FzhUaSGFE2zd-p-JObepb2D8VdDe9fU9XN6k2TmDabdysE9-helNHYtw2QFqDHxnKea8130manFd5W9jLBIgaPqMUm0vTKNgKNZ_UQPRxR6y-Hx1KTa9Nz91N2E0YCkiP4_QYOFn9XsTnvY7AiajkYsHU46TuqFTzP081Er6petmAvYMxKhxJeqOJNS5pX9kF7wU2cRbHPE75QN2GugRTdUAALO0WGAZi2rVJbFQg0lK9wG8BCZeiH0Qi0guHk9PznILsIMMbMIkX0Kw0IjjQfJz7i7jpU1E-YAmGc4D73DAjVmohiDXYChVoRZkxmIghKLklbiL0eN2SWafIAchNwC-4ibUsEU3aRkJNcI8e0atlYZytwW8C9m1nNzOF-poEY7Px1aWF3kqePNI86gD-njtYejGEC0Pw3opPw8uVkPzufeWYTIFR450xiKjPNZ_hONEBH9", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bf8f4e7-7f3d-4bbf-99d7-13d61df2c880", "record_id": "flaws_cloudtrail:0000431:9bf8f4e7-7f3d-4bbf-99d7-13d61df2c880", "row_index": 431, "timestamp": "2018-04-17T13:22:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bf8f4e7-7f3d-4bbf-99d7-13d61df2c880", "eventTime": "2018-04-17T13:22:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "459e701d-0d06-44bd-a0ca-19cd76797cc6", "record_id": "flaws_cloudtrail:0000432:459e701d-0d06-44bd-a0ca-19cd76797cc6", "row_index": 432, "timestamp": "2018-04-17T13:22:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "459e701d-0d06-44bd-a0ca-19cd76797cc6", "eventTime": "2018-04-17T13:22:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: SINUEh9TaYXvTVejZY3VRa2pgfuRsPMME5zz_3ioJd9PJoXJgt0mW_V6HZlKoFg_aUbelQq6XVgYkITPdxhou2vuUdwN-5BdhiZQt_C1pCAWvzi0caS2b3UGpm88vGDKSsMeD5zn8q6jcFdyFB1GCHHwu-S2b0KlDKgHN0ciRNYX0iUIYAbwsB-Oc70c4YQEkDuaJ1VNv4VGJknql0JQADdFPRx3mxcVG16WzLfN7-qQa8FGteg5CsRbSHhc-PNN0236Kn6qffhiWG9ebjd9tXyWQJ6UZtkfI3l96WJllWp_-KeG5p8Y0d88bbhV4Gzp4YjfUyXUAWPRK9Ua839It0mHNq8Gbby6wRLr-VNthVA5aXuxnXf21dZzXse_qadw01NwTFbHVjwdWUh8nEaRvc6i8H4KL-WsFE-xGeJ_xEg7-PZp_1cXPJPHWPe0Ip4t0ucqw3pc6dDV_CloS0zQZay7ohfeX8cIj0A1-AFksS1vFAysNyBtP6NoxHlpov94Rp0PsGO1BTHdpu69wRC8P7mKJKsn7CRENTtE9mXyp0xILya6jQZ0aDSxXj18yCeycEjghn-8fn1MeuombgsLDHOKV96HFYk8FdLZLquJmAYlmrC2Q3DPJsfRcN8F55ouY8CEmrTpFiJzd2PEuROOqzmItyOFn_jx", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5507a8cf-5562-4fe4-a24c-20ca39444fa2", "record_id": "flaws_cloudtrail:0000433:5507a8cf-5562-4fe4-a24c-20ca39444fa2", "row_index": 433, "timestamp": "2018-04-17T13:22:27Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5507a8cf-5562-4fe4-a24c-20ca39444fa2", "eventTime": "2018-04-17T13:22:27Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb98c31-56ff-478b-afeb-96f0ab81581e", "record_id": "flaws_cloudtrail:0000434:fbb98c31-56ff-478b-afeb-96f0ab81581e", "row_index": 434, "timestamp": "2018-04-17T13:22:27Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb98c31-56ff-478b-afeb-96f0ab81581e", "eventTime": "2018-04-17T13:22:27Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f994a2-9cb0-479b-b72c-61008417959e", "record_id": "flaws_cloudtrail:0000435:17f994a2-9cb0-479b-b72c-61008417959e", "row_index": 435, "timestamp": "2018-04-17T13:22:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f994a2-9cb0-479b-b72c-61008417959e", "eventTime": "2018-04-17T13:22:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aca2f5f7-2063-477d-bb3d-b0d4e4d3b1e1", "record_id": "flaws_cloudtrail:0000436:aca2f5f7-2063-477d-bb3d-b0d4e4d3b1e1", "row_index": 436, "timestamp": "2018-04-17T13:22:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aca2f5f7-2063-477d-bb3d-b0d4e4d3b1e1", "eventTime": "2018-04-17T13:22:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "452fbfc9-00cc-4b3a-83c2-9e446828bb7", "record_id": "flaws_cloudtrail:0000437:452fbfc9-00cc-4b3a-83c2-9e446828bb7", "row_index": 437, "timestamp": "2018-04-17T13:22:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "452fbfc9-00cc-4b3a-83c2-9e446828bb7", "eventTime": "2018-04-17T13:22:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd317bbe-a592-48f2-b830-57aad756a821", "record_id": "flaws_cloudtrail:0000438:fd317bbe-a592-48f2-b830-57aad756a821", "row_index": 438, "timestamp": "2018-04-17T13:22:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd317bbe-a592-48f2-b830-57aad756a821", "eventTime": "2018-04-17T13:22:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90759b93-fb05-40d3-8847-891470cbfa", "record_id": "flaws_cloudtrail:0000439:90759b93-fb05-40d3-8847-891470cbfa", "row_index": 439, "timestamp": "2018-04-17T13:22:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90759b93-fb05-40d3-8847-891470cbfa", "eventTime": "2018-04-17T13:22:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51dd5a92-67f2-41d0-8859-59bc357d19fb", "record_id": "flaws_cloudtrail:0000440:51dd5a92-67f2-41d0-8859-59bc357d19fb", "row_index": 440, "timestamp": "2018-04-17T13:22:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51dd5a92-67f2-41d0-8859-59bc357d19fb", "eventTime": "2018-04-17T13:22:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e341a5f-4160-4e3b-8ad5-48dce959a51b", "record_id": "flaws_cloudtrail:0000441:3e341a5f-4160-4e3b-8ad5-48dce959a51b", "row_index": 441, "timestamp": "2018-04-17T13:22:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e341a5f-4160-4e3b-8ad5-48dce959a51b", "eventTime": "2018-04-17T13:22:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311d5925-8b7c-448e-8a3b-4d3d241c3573", "record_id": "flaws_cloudtrail:0000442:311d5925-8b7c-448e-8a3b-4d3d241c3573", "row_index": 442, "timestamp": "2018-04-17T13:22:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311d5925-8b7c-448e-8a3b-4d3d241c3573", "eventTime": "2018-04-17T13:22:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d358c9c1-1963-4a81-8184-85160c9c9445", "record_id": "flaws_cloudtrail:0000443:d358c9c1-1963-4a81-8184-85160c9c9445", "row_index": 443, "timestamp": "2018-04-17T13:22:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d358c9c1-1963-4a81-8184-85160c9c9445", "eventTime": "2018-04-17T13:22:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4ee9171-a0d9-41f1-ae45-3a757a6ca3a0", "record_id": "flaws_cloudtrail:0000444:d4ee9171-a0d9-41f1-ae45-3a757a6ca3a0", "row_index": 444, "timestamp": "2018-04-17T13:22:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4ee9171-a0d9-41f1-ae45-3a757a6ca3a0", "eventTime": "2018-04-17T13:22:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa072d8-8baa-453b-8e62-4b5cbd24cf8b", "record_id": "flaws_cloudtrail:0000445:8aa072d8-8baa-453b-8e62-4b5cbd24cf8b", "row_index": 445, "timestamp": "2018-04-17T13:22:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa072d8-8baa-453b-8e62-4b5cbd24cf8b", "eventTime": "2018-04-17T13:22:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36672c-8def-44d6-87e3-e20983ad791", "record_id": "flaws_cloudtrail:0000446:36672c-8def-44d6-87e3-e20983ad791", "row_index": 446, "timestamp": "2018-04-17T13:22:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36672c-8def-44d6-87e3-e20983ad791", "eventTime": "2018-04-17T13:22:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: W8keuyjvlAY6GonAhwBydfBzkZW2zOOMl52n8Kx89Vc0j8NZKygNwtxHsk-WvW2wVO9pPmkQhvklQjC_CruEGgFlGsx0L5UpF5hT-lmGc-e78YvJ05dw8YSuUQOd95rIsulYyElEZzaTdr3qTZRemRNRPjUMDp6E8IxODU-9Y9w_08rA8lRWDZC9GRgetYuB-Z6kOt1kuou8_QqIKzUR4aNqqak2y6j3FVz_yEYqJWv3Bd2NiNLIWnpbHhSbMhOD_JOuEifwl6l-WNvwL60zo3AiitkYB8hn8JG3q_FnzEWDikFSi1Rzamz8eDCdw_BEAFKpMJggYoGlVOhrVVXgGZ_zYe4TtMM8mFLB5-HXxEZX1AVQaFujzUFEi52kSbbmchgYrg706bROaHpOvS0IlcyLQskeUW2Qwwpax2xniQAX1NP37QOL5e7eyas58Xr2kNcJJSL9igxlg1IjS_xOOulFzvp2NnkahLlW4okmZXtIczBYqQuvoJY1Hy-HPiR-Yz0Ni2BmrRkCAf2BH01B7Tn1jBWZp48_-aKe3h2OPrXbS3kkQQDOs3HAjhhMBPcGkb40lCdJcSEntChylIzVIBlROV8ZcGO9FT_WFsp_Dop8C2NdeoTFlsAsQE5DR52dhG-5saxMG5HV9izfuAr-Odaqlw8JsvER3kvS0O4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a673ca9-6a7b-4539-b9b0-bb6f71ae4b1a", "record_id": "flaws_cloudtrail:0000447:3a673ca9-6a7b-4539-b9b0-bb6f71ae4b1a", "row_index": 447, "timestamp": "2018-04-17T13:22:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a673ca9-6a7b-4539-b9b0-bb6f71ae4b1a", "eventTime": "2018-04-17T13:22:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365180aa-3b1b-488d-9750-367f0a7b783e", "record_id": "flaws_cloudtrail:0000448:365180aa-3b1b-488d-9750-367f0a7b783e", "row_index": 448, "timestamp": "2018-04-17T13:22:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365180aa-3b1b-488d-9750-367f0a7b783e", "eventTime": "2018-04-17T13:22:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7b2881e-600d-4d82-b028-c2c927392e7", "record_id": "flaws_cloudtrail:0000449:a7b2881e-600d-4d82-b028-c2c927392e7", "row_index": 449, "timestamp": "2018-04-17T13:22:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7b2881e-600d-4d82-b028-c2c927392e7", "eventTime": "2018-04-17T13:22:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da62a624-2884-4b74-b0c5-32708cf12a", "record_id": "flaws_cloudtrail:0000450:da62a624-2884-4b74-b0c5-32708cf12a", "row_index": 450, "timestamp": "2018-04-17T13:22:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da62a624-2884-4b74-b0c5-32708cf12a", "eventTime": "2018-04-17T13:22:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4f035ad-e65c-4f4c-8582-57df769dd4ef", "record_id": "flaws_cloudtrail:0000451:f4f035ad-e65c-4f4c-8582-57df769dd4ef", "row_index": 451, "timestamp": "2018-04-17T13:22:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4f035ad-e65c-4f4c-8582-57df769dd4ef", "eventTime": "2018-04-17T13:22:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea82aa67-f4a7-4d5c-bb24-e6db5fd3144c", "record_id": "flaws_cloudtrail:0000452:ea82aa67-f4a7-4d5c-bb24-e6db5fd3144c", "row_index": 452, "timestamp": "2018-04-17T13:22:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea82aa67-f4a7-4d5c-bb24-e6db5fd3144c", "eventTime": "2018-04-17T13:22:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f631b74-8e6a-490b-9034-b8abcb05e7fb", "record_id": "flaws_cloudtrail:0000453:8f631b74-8e6a-490b-9034-b8abcb05e7fb", "row_index": 453, "timestamp": "2018-04-17T13:22:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f631b74-8e6a-490b-9034-b8abcb05e7fb", "eventTime": "2018-04-17T13:22:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f3b2b6e-1f46-41f7-8bae-5bacdf75217d", "record_id": "flaws_cloudtrail:0000454:2f3b2b6e-1f46-41f7-8bae-5bacdf75217d", "row_index": 454, "timestamp": "2018-04-17T13:22:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f3b2b6e-1f46-41f7-8bae-5bacdf75217d", "eventTime": "2018-04-17T13:22:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0195c03-dd42-4100-a5c3-b69394e1eda", "record_id": "flaws_cloudtrail:0000455:b0195c03-dd42-4100-a5c3-b69394e1eda", "row_index": 455, "timestamp": "2018-04-17T13:22:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0195c03-dd42-4100-a5c3-b69394e1eda", "eventTime": "2018-04-17T13:22:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02e899c5-a50c-44ef-9fc8-a5af511808ca", "record_id": "flaws_cloudtrail:0000456:02e899c5-a50c-44ef-9fc8-a5af511808ca", "row_index": 456, "timestamp": "2018-04-17T13:22:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1272, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02e899c5-a50c-44ef-9fc8-a5af511808ca", "eventTime": "2018-04-17T13:22:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff81fe47-e619-4fbe-bfe5-086900cdbe1b8", "record_id": "flaws_cloudtrail:0000457:ff81fe47-e619-4fbe-bfe5-086900cdbe1b8", "row_index": 457, "timestamp": "2018-04-17T13:22:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff81fe47-e619-4fbe-bfe5-086900cdbe1b8", "eventTime": "2018-04-17T13:22:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9586d8e9-f2e5-49d1-b296-e175ccd00a69", "record_id": "flaws_cloudtrail:0000458:9586d8e9-f2e5-49d1-b296-e175ccd00a69", "row_index": 458, "timestamp": "2018-04-17T13:22:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1335, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9586d8e9-f2e5-49d1-b296-e175ccd00a69", "eventTime": "2018-04-17T13:22:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2b05b88-4ac4-499b-8d5b-4cf7f5130130", "record_id": "flaws_cloudtrail:0000459:d2b05b88-4ac4-499b-8d5b-4cf7f5130130", "row_index": 459, "timestamp": "2018-04-17T13:22:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2b05b88-4ac4-499b-8d5b-4cf7f5130130", "eventTime": "2018-04-17T13:22:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f776ada-0e27-40d4-bf8d-e954e483f4ca", "record_id": "flaws_cloudtrail:0000460:6f776ada-0e27-40d4-bf8d-e954e483f4ca", "row_index": 460, "timestamp": "2018-04-17T13:22:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f776ada-0e27-40d4-bf8d-e954e483f4ca", "eventTime": "2018-04-17T13:22:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "676f4c2a-a004-4c3a-8eea-baa46ddd2a82", "record_id": "flaws_cloudtrail:0000461:676f4c2a-a004-4c3a-8eea-baa46ddd2a82", "row_index": 461, "timestamp": "2018-04-17T13:22:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "676f4c2a-a004-4c3a-8eea-baa46ddd2a82", "eventTime": "2018-04-17T13:22:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48139-e407-462b-9611-715b642b240c", "record_id": "flaws_cloudtrail:0000462:48139-e407-462b-9611-715b642b240c", "row_index": 462, "timestamp": "2018-04-17T13:22:39Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48139-e407-462b-9611-715b642b240c", "eventTime": "2018-04-17T13:22:39Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "943a8e14-d879-4ade-8aa3-c0d25cf596d6", "record_id": "flaws_cloudtrail:0000463:943a8e14-d879-4ade-8aa3-c0d25cf596d6", "row_index": 463, "timestamp": "2018-04-17T13:22:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "943a8e14-d879-4ade-8aa3-c0d25cf596d6", "eventTime": "2018-04-17T13:22:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d54b694-b1de-41b9-96e1-138abb45f7f0", "record_id": "flaws_cloudtrail:0000464:2d54b694-b1de-41b9-96e1-138abb45f7f0", "row_index": 464, "timestamp": "2018-04-17T13:22:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d54b694-b1de-41b9-96e1-138abb45f7f0", "eventTime": "2018-04-17T13:22:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ep6Qu-AU9dPrvFgeK1E7ZDkvG-LD-roEpbQN0GvU0Ql8ZzVbz2kPZ49mDa7bJeVSnm1TX_0ttllLpbaCXxzV1W2vWNZr0LG3BTbpSeyxYZVOUvD4dtlfLX2c81U5mqZM2J_3S5wG-wSt_6_eC_RrmVz-TycFCfgdpxIIcqP9PIerClC8ysEgreKzAc59UQ-8iPcmjPPFJUj6HOP3MyikXpp_6mRads28i6Fbwv_ZNnQLUloKW3uebZMKL-Xge1V7myP74VJxJZBplHwi1kLdxcw6VF7YxpNu0HVCRejnTuz6cFbB97ZNO_nccG77Q9n1bbQ-P9bavMnXcTiE_aJ55ktNF7kkcVrexqxYkeK2eHMjwTIJKNPQaeuOFkeYfMN7yUeHa9XKXW0qMzmEB8Wx2QeTX2lcka5mQ3SxUd5MLLosbgUYGRJD7TOm2VuoIMkPR_ok7yTjoyxugQm5OAte-2lpXij-W-VwwS8Ncqaz_PxfFOStqfcJ8JSvoEoFFHbeWP9I-Ot4c7-hhQ0mGsnwKevqvfHH8oVO6ozYbjHWvfofPAIwJJsXHp5pmZaJWuWYDnoenZtwJ_-qDAX2B_xuIamawF_WS2rcTkdnEgzdy_H5e6Am6FYPDVilQdFxXu5gJeThXsQfrU98ZUlF_Orou1qs_5Mn6s3pa7wQXd8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53eb5644-bc49-40ed-8ae4-2823b6728ca7", "record_id": "flaws_cloudtrail:0000465:53eb5644-bc49-40ed-8ae4-2823b6728ca7", "row_index": 465, "timestamp": "2018-04-17T13:22:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53eb5644-bc49-40ed-8ae4-2823b6728ca7", "eventTime": "2018-04-17T13:22:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "424b5180-ecb2-440e-ba6e-7e122fa5b261", "record_id": "flaws_cloudtrail:0000466:424b5180-ecb2-440e-ba6e-7e122fa5b261", "row_index": 466, "timestamp": "2018-04-17T13:22:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "424b5180-ecb2-440e-ba6e-7e122fa5b261", "eventTime": "2018-04-17T13:22:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ca724cd-2863-43eb-932c-438b8c500164", "record_id": "flaws_cloudtrail:0000467:8ca724cd-2863-43eb-932c-438b8c500164", "row_index": 467, "timestamp": "2018-04-17T13:22:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1333, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ca724cd-2863-43eb-932c-438b8c500164", "eventTime": "2018-04-17T13:22:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb673a10-cfe5-4c1a-a119-fa69de8c6893", "record_id": "flaws_cloudtrail:0000468:cb673a10-cfe5-4c1a-a119-fa69de8c6893", "row_index": 468, "timestamp": "2018-04-17T13:22:42Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb673a10-cfe5-4c1a-a119-fa69de8c6893", "eventTime": "2018-04-17T13:22:42Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89c71c02-f929-40ea-b79a-5b7c2aac2c4a", "record_id": "flaws_cloudtrail:0000469:89c71c02-f929-40ea-b79a-5b7c2aac2c4a", "row_index": 469, "timestamp": "2018-04-17T13:22:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89c71c02-f929-40ea-b79a-5b7c2aac2c4a", "eventTime": "2018-04-17T13:22:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fa164a0-63ce-4d0e-8496-049dbbe1e922", "record_id": "flaws_cloudtrail:0000470:8fa164a0-63ce-4d0e-8496-049dbbe1e922", "row_index": 470, "timestamp": "2018-04-17T13:22:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fa164a0-63ce-4d0e-8496-049dbbe1e922", "eventTime": "2018-04-17T13:22:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VANGlksmA9XSFKLMMDpEvOpi6yl1TSm9vCo9Vf3ldL8WzKsvMnU8LJcc04ME7OFHf9dsN0IknC5eTPQW-uajce69-eMC0abqQr8GsXhNoXm-QWx75G9sfHgGthya9Flusftgm-jaXIIk49O1tzg9SNcK1Oan5pm24MaQ9FFtjD1etSWN33-gkdUP0yPpDPTRDVHI8sAtIBwphqItftgZ25JmUlYJlpnjT0StcTNuEnNla7iSrMiNFtG9UQojkzVUlu3W56koWgvVDGXoyMCVRPbcEFrgOuZRxy9h0vwG2-UQgY0_83lglgEeI5_o4NBQ_KQnEp6NeYQz59pe5Wzp20EN8i7oFqPdrpyIBqz_3tCcmeV7vWnsOceXvvTxfcjunIgnt-iDMoPxS0fmGD-JQnR7fzS278CvH1EUZYtDMtEggFOWUdI8PgE84rxqgodlM-pa7UtLJVaEN3hhg35S0vXbmwsFfdFSypeNrZxyk93ZFrJKls_e7W_N3Bamx_0ccL-HtjKTn4mXFNrVUfDhDt-nZOJXgHj0F_Sry7ZiMSB5ac3fcRmoiOP0aqahJ03Ax6NbXSVnTlyIc0D78nt0sQrKIo6JYD_OJCwjuTWLfr8uGrLtHh4eF7yp-5PoLKmlX8nA3STS8eroeWqvu7JzDF4rc995-LS3aiKEY9A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c45e0ea3-05e9-4573-8e85-8c819926e1cf", "record_id": "flaws_cloudtrail:0000471:c45e0ea3-05e9-4573-8e85-8c819926e1cf", "row_index": 471, "timestamp": "2018-04-17T13:22:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1334, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c45e0ea3-05e9-4573-8e85-8c819926e1cf", "eventTime": "2018-04-17T13:22:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30c812bb-6bbd-4d5f-97c0-c1cb22198c9", "record_id": "flaws_cloudtrail:0000472:30c812bb-6bbd-4d5f-97c0-c1cb22198c9", "row_index": 472, "timestamp": "2018-04-17T13:22:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30c812bb-6bbd-4d5f-97c0-c1cb22198c9", "eventTime": "2018-04-17T13:22:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d20b61d-2a70-4a8b-93df-6fbf31a17d02", "record_id": "flaws_cloudtrail:0000473:2d20b61d-2a70-4a8b-93df-6fbf31a17d02", "row_index": 473, "timestamp": "2018-04-17T13:22:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1335, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d20b61d-2a70-4a8b-93df-6fbf31a17d02", "eventTime": "2018-04-17T13:22:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1b104c6-1b49-4dc2-8c20-212e2f330235", "record_id": "flaws_cloudtrail:0000474:d1b104c6-1b49-4dc2-8c20-212e2f330235", "row_index": 474, "timestamp": "2018-04-17T13:22:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1427, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1b104c6-1b49-4dc2-8c20-212e2f330235", "eventTime": "2018-04-17T13:22:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273d2839-2f74-4a2f-bc67-dc50bfb6561d", "record_id": "flaws_cloudtrail:0000475:273d2839-2f74-4a2f-bc67-dc50bfb6561d", "row_index": 475, "timestamp": "2018-04-17T13:22:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273d2839-2f74-4a2f-bc67-dc50bfb6561d", "eventTime": "2018-04-17T13:22:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "255412c-ae76-40f1-aaf4-f122b28b7e55", "record_id": "flaws_cloudtrail:0000476:255412c-ae76-40f1-aaf4-f122b28b7e55", "row_index": 476, "timestamp": "2018-04-17T13:22:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "255412c-ae76-40f1-aaf4-f122b28b7e55", "eventTime": "2018-04-17T13:22:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40fe0927-ce38-4ea5-a7dc-db73c9d3ae32", "record_id": "flaws_cloudtrail:0000477:40fe0927-ce38-4ea5-a7dc-db73c9d3ae32", "row_index": 477, "timestamp": "2018-04-17T13:22:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40fe0927-ce38-4ea5-a7dc-db73c9d3ae32", "eventTime": "2018-04-17T13:22:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8accba6f-70cc-4ba4-8f58-a3ad8ccd98bb", "record_id": "flaws_cloudtrail:0000478:8accba6f-70cc-4ba4-8f58-a3ad8ccd98bb", "row_index": 478, "timestamp": "2018-04-17T13:22:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8accba6f-70cc-4ba4-8f58-a3ad8ccd98bb", "eventTime": "2018-04-17T13:22:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac2e79cf-0737-485d-a224-4a36fa40623", "record_id": "flaws_cloudtrail:0000479:ac2e79cf-0737-485d-a224-4a36fa40623", "row_index": 479, "timestamp": "2018-04-17T13:22:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac2e79cf-0737-485d-a224-4a36fa40623", "eventTime": "2018-04-17T13:22:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d823374-d9d8-41b5-9cbf-3980b38ef7d2", "record_id": "flaws_cloudtrail:0000480:0d823374-d9d8-41b5-9cbf-3980b38ef7d2", "row_index": 480, "timestamp": "2018-04-17T13:22:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d823374-d9d8-41b5-9cbf-3980b38ef7d2", "eventTime": "2018-04-17T13:22:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3d8553-fa49-4daf-869f-51e659aab426", "record_id": "flaws_cloudtrail:0000481:2e3d8553-fa49-4daf-869f-51e659aab426", "row_index": 481, "timestamp": "2018-04-17T13:22:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3d8553-fa49-4daf-869f-51e659aab426", "eventTime": "2018-04-17T13:22:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cc1375b-8d44-4c75-94f0-f18ebf69e8f5", "record_id": "flaws_cloudtrail:0000482:0cc1375b-8d44-4c75-94f0-f18ebf69e8f5", "row_index": 482, "timestamp": "2018-04-17T13:22:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cc1375b-8d44-4c75-94f0-f18ebf69e8f5", "eventTime": "2018-04-17T13:22:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ec1a66e-b7a2-416c-a9bf-33faa573b643", "record_id": "flaws_cloudtrail:0000483:7ec1a66e-b7a2-416c-a9bf-33faa573b643", "row_index": 483, "timestamp": "2018-04-17T13:22:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ec1a66e-b7a2-416c-a9bf-33faa573b643", "eventTime": "2018-04-17T13:22:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a2b6d63-caf3-4bde-be3a-0c4b123f4692", "record_id": "flaws_cloudtrail:0000484:6a2b6d63-caf3-4bde-be3a-0c4b123f4692", "row_index": 484, "timestamp": "2018-04-17T13:22:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a2b6d63-caf3-4bde-be3a-0c4b123f4692", "eventTime": "2018-04-17T13:22:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4750bf91-6ec1-42ea-acd3-defcd0c4d38e", "record_id": "flaws_cloudtrail:0000485:4750bf91-6ec1-42ea-acd3-defcd0c4d38e", "row_index": 485, "timestamp": "2018-04-17T13:22:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1426, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4750bf91-6ec1-42ea-acd3-defcd0c4d38e", "eventTime": "2018-04-17T13:22:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9ae7deb-b7d4-4bdb-b811-0f743e986bfe", "record_id": "flaws_cloudtrail:0000486:a9ae7deb-b7d4-4bdb-b811-0f743e986bfe", "row_index": 486, "timestamp": "2018-04-17T13:22:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9ae7deb-b7d4-4bdb-b811-0f743e986bfe", "eventTime": "2018-04-17T13:22:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0059d070-4df0-472c-86e1-af778b27fddf", "record_id": "flaws_cloudtrail:0000487:0059d070-4df0-472c-86e1-af778b27fddf", "row_index": 487, "timestamp": "2018-04-17T13:22:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0059d070-4df0-472c-86e1-af778b27fddf", "eventTime": "2018-04-17T13:22:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f2791cd-71f7-48cf-a477-f67b18addd05", "record_id": "flaws_cloudtrail:0000488:2f2791cd-71f7-48cf-a477-f67b18addd05", "row_index": 488, "timestamp": "2018-04-17T13:23:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f2791cd-71f7-48cf-a477-f67b18addd05", "eventTime": "2018-04-17T13:23:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a1b566a-8fe9-4997-b55c-4935ca85b1b7", "record_id": "flaws_cloudtrail:0000489:2a1b566a-8fe9-4997-b55c-4935ca85b1b7", "row_index": 489, "timestamp": "2018-04-17T13:23:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a1b566a-8fe9-4997-b55c-4935ca85b1b7", "eventTime": "2018-04-17T13:23:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88c9123-b524-40af-b5db-ef07095153e2", "record_id": "flaws_cloudtrail:0000490:b88c9123-b524-40af-b5db-ef07095153e2", "row_index": 490, "timestamp": "2018-04-17T13:23:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1268, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88c9123-b524-40af-b5db-ef07095153e2", "eventTime": "2018-04-17T13:23:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe00ec71-8817-45b1-b069-540731f", "record_id": "flaws_cloudtrail:0000491:fe00ec71-8817-45b1-b069-540731f", "row_index": 491, "timestamp": "2018-04-17T13:23:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1371, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe00ec71-8817-45b1-b069-540731f", "eventTime": "2018-04-17T13:23:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10c81aad-190c-4c97-aa1f-50526d52843f", "record_id": "flaws_cloudtrail:0000492:10c81aad-190c-4c97-aa1f-50526d52843f", "row_index": 492, "timestamp": "2018-04-17T13:23:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10c81aad-190c-4c97-aa1f-50526d52843f", "eventTime": "2018-04-17T13:23:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "274cf4e2-6e47-40b0-992f-718c1a4fcea6", "record_id": "flaws_cloudtrail:0000493:274cf4e2-6e47-40b0-992f-718c1a4fcea6", "row_index": 493, "timestamp": "2018-04-17T13:23:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "274cf4e2-6e47-40b0-992f-718c1a4fcea6", "eventTime": "2018-04-17T13:23:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1WvsTkrnVBaKB4srrYqmu7AfrLwCI2iHGvmxqkCEQ40dkp-7UXKyZcvj1qDhB_LrwWJunYZLYgoUie0CWRCJPrYbV0ji3qHtLFVkLAPuCweC-lMvENsvIb7NLGkyquVYh8cL0KxeH2XwVff-BVUK-8j90DJyB59J_nvsESEuTNFhFTb6RKbo5Gm-0ZA2VVibknulTQNW4FAH5i3-m3iG2qyFIbn0988_q60HGSrR9Njnrtz7TSirqXRaYMtVftGGQSTjV1XfpjgX9loamYrKAp6XZPn9qDbdLTjnQFmCELAeDoZ6s2sg3-anNkioFASl2t6HwOK25hBKHKqwShsFK6QR1it9TbTnO1k6fG-ozAo1fCZb7TNbyMnuR9mNW074ivHM2WAbJ_pxdU2nP9rK1fBXsoo_TnSVV-CnvqrrHnhWNSIWC68_Kg9hBJQmt9zcLKDZZwbrArLoDxP2LqoHsUcnJ_7iEp9sM-8xZivVqTL7NwssScOhEDkve15bGK3TJ4UGTJIP3puBnrsbKV0vZMKTbxCDyI7xqFYda_P_8AkY7R4JQxGLZiiB5m8oIifPS695HBdmPGGictzq7OlLQ0C_P7bdEoT-SBI5Bfa39GDbez-vdJ9TnLFKSxOrYTm0aeF_uODs9Y9JPlGLkoc8hZpNWe-oBE57CN5F", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b211b464-982e-48a0-b1fd-99680a8dd836", "record_id": "flaws_cloudtrail:0000494:b211b464-982e-48a0-b1fd-99680a8dd836", "row_index": 494, "timestamp": "2018-04-17T13:23:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b211b464-982e-48a0-b1fd-99680a8dd836", "eventTime": "2018-04-17T13:23:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e7a51b-1608-475a-9dac-e86f84b3e3ce", "record_id": "flaws_cloudtrail:0000495:f9e7a51b-1608-475a-9dac-e86f84b3e3ce", "row_index": 495, "timestamp": "2018-04-17T13:23:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e7a51b-1608-475a-9dac-e86f84b3e3ce", "eventTime": "2018-04-17T13:23:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22ae4e8b-7749-4c2f-b819-73f1b079e91b", "record_id": "flaws_cloudtrail:0000496:22ae4e8b-7749-4c2f-b819-73f1b079e91b", "row_index": 496, "timestamp": "2018-04-17T13:23:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22ae4e8b-7749-4c2f-b819-73f1b079e91b", "eventTime": "2018-04-17T13:23:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12753b68-8c09-4f0f-8b47-97c334f6c1bf", "record_id": "flaws_cloudtrail:0000497:12753b68-8c09-4f0f-8b47-97c334f6c1bf", "row_index": 497, "timestamp": "2018-04-17T13:23:06Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12753b68-8c09-4f0f-8b47-97c334f6c1bf", "eventTime": "2018-04-17T13:23:06Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19cf0b83-9574-41d9-981f-8f4e7d75ba3a", "record_id": "flaws_cloudtrail:0000498:19cf0b83-9574-41d9-981f-8f4e7d75ba3a", "row_index": 498, "timestamp": "2018-04-17T13:23:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19cf0b83-9574-41d9-981f-8f4e7d75ba3a", "eventTime": "2018-04-17T13:23:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7309f1a-6210-4595-8b1d-c5e5dfb75186", "record_id": "flaws_cloudtrail:0000499:f7309f1a-6210-4595-8b1d-c5e5dfb75186", "row_index": 499, "timestamp": "2018-04-17T13:23:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7309f1a-6210-4595-8b1d-c5e5dfb75186", "eventTime": "2018-04-17T13:23:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IKcgBOKDmpbyuxk0ESZSwY38uJQ5hAr1s4xiLHy1l-negvto8ytuiab9P_lmnaCwjSvt1H_FKQp7g_gYEkQftnoTU6uxkzpPjKQnhQ6kS6y65FTjo_n19W6flBwwyv_KG4iRtF4ki4YvJrR6Rrqk6IwHlOsV2_cpkPOaBwIBIsEEOHvAcHYV1MefxILCpIcOoEcbl7LOMQ2Otc-MGE_ti49Lk_eD-ADOtMbac86YCaVl8DAVNkKR0x319uLA-umWEcrszi_meV6s4XKa8b1N0N0ZxZ1LOiEDHbyqke70JfnBAWa4yAEj_v3j6CLrJu16mE-GDfxDk2S1LDmhRkUyDq8F_sIOma6ApJo1xe1cau3ph5JYZtiXxwFVc5qHtXT4xzY5uNSeIQvIQC8N_VCC3k29wg55Ati9kSCc0pZZij5TQZkmOFFg3_zTrozTIxdJvJGDQrRLKkNFScmkDW2gkGGAwc0-w2Gvx48KP_QRS-kDLQBiSTcnYY7jKBYAIdhgyUb2xGlgXK5PrfuOaCFY4Ubb902qa470La8M7SIJRzypT8aQSQlsjMWn3gCFBUA8_2W4nPETSLLx7TFTHafp-Lu3KlqO9wTR5sCIDsRxni__Kqf2_9h4qxj4T3xgtgRBe0jtA1jIMWm5FkF7SeW3wOecEvP2ex_QI7w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67af02cb-dea5-4c35-a81f-a2473f872bca", "record_id": "flaws_cloudtrail:0000500:67af02cb-dea5-4c35-a81f-a2473f872bca", "row_index": 500, "timestamp": "2018-04-17T13:23:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67af02cb-dea5-4c35-a81f-a2473f872bca", "eventTime": "2018-04-17T13:23:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4813c2a4-c733-48be-950b-9635d450a8fb", "record_id": "flaws_cloudtrail:0000501:4813c2a4-c733-48be-950b-9635d450a8fb", "row_index": 501, "timestamp": "2018-04-17T13:23:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4813c2a4-c733-48be-950b-9635d450a8fb", "eventTime": "2018-04-17T13:23:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1b7366d-d8ac-45eb-aa3c-a34610175e04", "record_id": "flaws_cloudtrail:0000502:a1b7366d-d8ac-45eb-aa3c-a34610175e04", "row_index": 502, "timestamp": "2018-04-17T13:23:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1b7366d-d8ac-45eb-aa3c-a34610175e04", "eventTime": "2018-04-17T13:23:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "267365d-89f1-4eec-9d73-5f467d7db7af", "record_id": "flaws_cloudtrail:0000503:267365d-89f1-4eec-9d73-5f467d7db7af", "row_index": 503, "timestamp": "2018-04-17T13:23:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "267365d-89f1-4eec-9d73-5f467d7db7af", "eventTime": "2018-04-17T13:23:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19c9519-cb8f-426c-9c24-39e347d61e3f", "record_id": "flaws_cloudtrail:0000504:f19c9519-cb8f-426c-9c24-39e347d61e3f", "row_index": 504, "timestamp": "2018-04-17T13:23:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19c9519-cb8f-426c-9c24-39e347d61e3f", "eventTime": "2018-04-17T13:23:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b702705cc-11e9-48b6-a758-ff6907dd4549", "record_id": "flaws_cloudtrail:0000505:b702705cc-11e9-48b6-a758-ff6907dd4549", "row_index": 505, "timestamp": "2018-04-17T13:23:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b702705cc-11e9-48b6-a758-ff6907dd4549", "eventTime": "2018-04-17T13:23:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0bbad92-51fe-4cd7-b1e1-a285d343cb09", "record_id": "flaws_cloudtrail:0000506:e0bbad92-51fe-4cd7-b1e1-a285d343cb09", "row_index": 506, "timestamp": "2018-04-17T13:23:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0bbad92-51fe-4cd7-b1e1-a285d343cb09", "eventTime": "2018-04-17T13:23:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93243-ff06-4bed-aa87-cbb6a41a7bdf", "record_id": "flaws_cloudtrail:0000507:93243-ff06-4bed-aa87-cbb6a41a7bdf", "row_index": 507, "timestamp": "2018-04-17T13:23:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93243-ff06-4bed-aa87-cbb6a41a7bdf", "eventTime": "2018-04-17T13:23:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ebccf4-d70a-4c62-a498-69ccad5efe38", "record_id": "flaws_cloudtrail:0000508:38ebccf4-d70a-4c62-a498-69ccad5efe38", "row_index": 508, "timestamp": "2018-04-17T13:23:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ebccf4-d70a-4c62-a498-69ccad5efe38", "eventTime": "2018-04-17T13:23:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8428ce2-ef68-4108-bfe6-0198ec2b4813", "record_id": "flaws_cloudtrail:0000509:c8428ce2-ef68-4108-bfe6-0198ec2b4813", "row_index": 509, "timestamp": "2018-04-17T13:23:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8428ce2-ef68-4108-bfe6-0198ec2b4813", "eventTime": "2018-04-17T13:23:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b111db14-2a9e-495e-bddc-27e1a10ca4e3", "record_id": "flaws_cloudtrail:0000510:b111db14-2a9e-495e-bddc-27e1a10ca4e3", "row_index": 510, "timestamp": "2018-04-17T13:23:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b111db14-2a9e-495e-bddc-27e1a10ca4e3", "eventTime": "2018-04-17T13:23:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a547a01-e144-4a14-b453-84d0fcb9f259", "record_id": "flaws_cloudtrail:0000511:2a547a01-e144-4a14-b453-84d0fcb9f259", "row_index": 511, "timestamp": "2018-04-17T13:23:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a547a01-e144-4a14-b453-84d0fcb9f259", "eventTime": "2018-04-17T13:23:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90125fb-500e-4c25-8211-9018ef3d5589", "record_id": "flaws_cloudtrail:0000512:90125fb-500e-4c25-8211-9018ef3d5589", "row_index": 512, "timestamp": "2018-04-17T13:23:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90125fb-500e-4c25-8211-9018ef3d5589", "eventTime": "2018-04-17T13:23:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128d130a-afab-4b3d-94d4-62cdecea3218", "record_id": "flaws_cloudtrail:0000513:128d130a-afab-4b3d-94d4-62cdecea3218", "row_index": 513, "timestamp": "2018-04-17T13:23:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128d130a-afab-4b3d-94d4-62cdecea3218", "eventTime": "2018-04-17T13:23:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c991ad-6f12-438b-8cf5-a06ac107079f", "record_id": "flaws_cloudtrail:0000514:c1c991ad-6f12-438b-8cf5-a06ac107079f", "row_index": 514, "timestamp": "2018-04-17T13:23:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c991ad-6f12-438b-8cf5-a06ac107079f", "eventTime": "2018-04-17T13:23:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afad1acd-bf0f-40b9-856d-ef7c8455f49f", "record_id": "flaws_cloudtrail:0000515:afad1acd-bf0f-40b9-856d-ef7c8455f49f", "row_index": 515, "timestamp": "2018-04-17T13:23:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afad1acd-bf0f-40b9-856d-ef7c8455f49f", "eventTime": "2018-04-17T13:23:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa70c860-d6b8-45c7-9965-6fc4a58c50fc", "record_id": "flaws_cloudtrail:0000516:aa70c860-d6b8-45c7-9965-6fc4a58c50fc", "row_index": 516, "timestamp": "2018-04-17T13:23:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa70c860-d6b8-45c7-9965-6fc4a58c50fc", "eventTime": "2018-04-17T13:23:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f67f7e46-b3f8-4aad-9c09-eceb057f99a4", "record_id": "flaws_cloudtrail:0000517:f67f7e46-b3f8-4aad-9c09-eceb057f99a4", "row_index": 517, "timestamp": "2018-04-17T13:23:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f67f7e46-b3f8-4aad-9c09-eceb057f99a4", "eventTime": "2018-04-17T13:23:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "533b1669-2000-4830-aca0-78bfe0a0463f", "record_id": "flaws_cloudtrail:0000518:533b1669-2000-4830-aca0-78bfe0a0463f", "row_index": 518, "timestamp": "2018-04-17T13:23:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "533b1669-2000-4830-aca0-78bfe0a0463f", "eventTime": "2018-04-17T13:23:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78447-f672-4e6f-a8fd-93c447416a63", "record_id": "flaws_cloudtrail:0000519:78447-f672-4e6f-a8fd-93c447416a63", "row_index": 519, "timestamp": "2018-04-17T13:23:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1922, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78447-f672-4e6f-a8fd-93c447416a63", "eventTime": "2018-04-17T13:23:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QdfG-XQSqnCW7VgmSzVv26_x-m7iLJufNW4iOKsSPDxHwwHBHsY4QKvAFgk5Sd0UEj2fa4UTFB-DSw_gd2Jm47J5i4opwaKey-YB48XD9RROO0rTcr69pR9jtFzbyy-_aKydKyAFGouf8hJZPBomD2tBdpfle4R_1G9EtOqStGFtms2HZSBArE4FLSr3YcC9Kw2uBT8ZQiXJFu9xz15X4s8_EdKzwWV5K_CmPkBY_bNlvGVO4l9W6WSrnPjKv0-qhnX6Xf440VnOQfve51HFHM_zgaHP6fpJ9nVCqU394_hMsyBduQo4W40b3cjaFiE66UMKXzxqxFBD4WmqCIf2mZHgEe4Te_12KPVmshItw8biZQ0f4csQVIkooOBiF_GL7nRCYHD5_y9YIgMCpxJnMVtrhap-ZI6-gpFD56FrbOUXKm4Sn_CFFg1p460UgZQ1ZihJsfVVgl7yaGemEsZkXtrt876dkoLfoHkXq65VM6eeHCoHIC6YJOhqA7dQD_1UpxvuM2Ae1sIg3PeiJLDc0Yfl_la9qK6SZ81OlhByMy1mrP8RCuE4Y1_Yj06GHoFneK5NCdLj0DUD5Vh71-U_jnJnQ66vecgLEXxvqK1JuciyWsrI63DaltEdwVIpIjt9MVWmge0kdbv3pcb6rQiwlBYVJZQkR1lwKG0", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f56c72f-0fa2-4b78-9647-bf6900f6b1c0", "record_id": "flaws_cloudtrail:0000520:9f56c72f-0fa2-4b78-9647-bf6900f6b1c0", "row_index": 520, "timestamp": "2018-04-17T13:23:20Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f56c72f-0fa2-4b78-9647-bf6900f6b1c0", "eventTime": "2018-04-17T13:23:20Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a693e1f-6da7-4553-9e61-cdf88d72e6cc", "record_id": "flaws_cloudtrail:0000521:1a693e1f-6da7-4553-9e61-cdf88d72e6cc", "row_index": 521, "timestamp": "2018-04-17T13:23:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a693e1f-6da7-4553-9e61-cdf88d72e6cc", "eventTime": "2018-04-17T13:23:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6769acaf-9ac0-4d1f-8946-65dd2062bb8a", "record_id": "flaws_cloudtrail:0000522:6769acaf-9ac0-4d1f-8946-65dd2062bb8a", "row_index": 522, "timestamp": "2018-04-17T13:23:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6769acaf-9ac0-4d1f-8946-65dd2062bb8a", "eventTime": "2018-04-17T13:23:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79913fd-06e1-4b4f-8d87-7a58917", "record_id": "flaws_cloudtrail:0000523:79913fd-06e1-4b4f-8d87-7a58917", "row_index": 523, "timestamp": "2018-04-17T13:23:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79913fd-06e1-4b4f-8d87-7a58917", "eventTime": "2018-04-17T13:23:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7x2XficPoa8LWSFA7wPOLIPHYGWValqLwedwH1B9-ws2goo3obewM_9L9oAKGPK0u_OLL-Wh4YHPEJ0w1cWbejefARhvVfvHmTvrqDUGXAYd8puPn89tpoc6ODgVsyLk7fnKZJ-QjgYHLecPS-eloExMnqjXxCQNA0KqPv7J7X-KSShnS7sP5miFMgu5Jo78dXcY2Eg957OEKL96GI73Ea9HdW-aAfZogvn6nDJ1ts-J1C0wH49MU47lNDUeF5Q8gaVdcTjiEmCrUik808K92SizfSZomwWrf3fUAjP6XqvjfWz3gK1_kLrzhqawegeo_5eHahaStEJTN52LS-KjEMqcs9CwMAvC6OJBW69zsJlRCrXqQxrgQNrvfkxx5RbEV2SaIzJ4O27Lp6vW5QkJilbXpuImmCqsTGzEyvln8VO1-pEwVGlhnqQ3fcnq7QOFpcfL7cCFfxFCVUvwVSGRUQBqkBpclas2sFpzcn4sc7fYo4CQeFjX5RFUica33AyQmst9Ryo-YRoFsvdQVH1mrG1ryG_LVqAdPjhrEwE8UOJbpAkqv3s5wywqpQBOKxJUB4FH0dj3CpBfKQvYUA58CWFJZyiKzPR7tZAeHVvwtBbRDFlF9QpLpK8ZX6L2Lz5_YpjdRn8u5cHQXidF0zyo0RU5lSNUARJJlPc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "833baa57-758d-4e05-a533-c74f2667a7e9", "record_id": "flaws_cloudtrail:0000524:833baa57-758d-4e05-a533-c74f2667a7e9", "row_index": 524, "timestamp": "2018-04-17T13:23:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "833baa57-758d-4e05-a533-c74f2667a7e9", "eventTime": "2018-04-17T13:23:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ppnVb4uNFLwPwTNhNHcxyumLyBY7-dhWdQ8pwOq8DmKYiREuK_74fkaX1yY7IyRhVYAstuXijlJf0k0IctYbEeLkR8_mKth6IcMdifVclbrzgdStf1A_MWuwVYAasNKt7fc0Pm0GwvgZskMo_XYr-xbxjQWlP3KqA8R1nvQP4CCbDsl3T9Mv2AcGgkN6oZUWz2zw4NwisZ0UqefG0HFi5lr8D1_Sry7ls7KlzxJ5jEdYHEd1INoQv-_61RZnJmovsego0BT3tD9Mc-3bEYroLN2KhQSehiCboa1KJEo-yVDb_mduC8H7tGYZMnW8QuUUjcM4rdI3Ukz-qRq2IH_YdV0e-2yIADLVTrx3vLcALc-Q9lqPiE7NzU_wmtNJvlp6hlw7i8MQyG8OHvFco_rIhwET2QbUFQhbEqAIUbXLbuedNq9AqpwX7H4t2JgNNzq37nKDZut9T2B_1k1KIgayh97umyfLeaKbFCQSIkb0sJdXMwTzNXbHtF38xqSbTsTth9v6P5OL8PDAw_hGGzFFd3EbskJB8lb-9UJmziuZbbEls23-HbQoXSnYl72GZaIUzzYrvDDYN1sSw4wdS-y9GyfAJfZqjCt-9lZAz_EiGOYaZUpFSyVVi9eOkm0eqMmG5vBQL8x5P-fNppsvjE_TaqZLe5rShfc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adc34bb7-765d-40d6-9956-6ae8d771d227", "record_id": "flaws_cloudtrail:0000525:adc34bb7-765d-40d6-9956-6ae8d771d227", "row_index": 525, "timestamp": "2018-04-17T13:23:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adc34bb7-765d-40d6-9956-6ae8d771d227", "eventTime": "2018-04-17T13:23:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd0a8e9-bf1a-4f5b-82e6-71d3584b6bed", "record_id": "flaws_cloudtrail:0000526:7cd0a8e9-bf1a-4f5b-82e6-71d3584b6bed", "row_index": 526, "timestamp": "2018-04-17T13:23:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd0a8e9-bf1a-4f5b-82e6-71d3584b6bed", "eventTime": "2018-04-17T13:23:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5be9d7c8-19ec-44b4-8912-f58460d5a8de", "record_id": "flaws_cloudtrail:0000527:5be9d7c8-19ec-44b4-8912-f58460d5a8de", "row_index": 527, "timestamp": "2018-04-17T13:23:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5be9d7c8-19ec-44b4-8912-f58460d5a8de", "eventTime": "2018-04-17T13:23:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d654228b-1664-4ff5-932e-7c07bfae5b55", "record_id": "flaws_cloudtrail:0000528:d654228b-1664-4ff5-932e-7c07bfae5b55", "row_index": 528, "timestamp": "2018-04-17T13:23:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d654228b-1664-4ff5-932e-7c07bfae5b55", "eventTime": "2018-04-17T13:23:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1f9dfc3-d5d7-4122-b4ea-7e8500405559", "record_id": "flaws_cloudtrail:0000529:e1f9dfc3-d5d7-4122-b4ea-7e8500405559", "row_index": 529, "timestamp": "2018-04-17T13:23:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1f9dfc3-d5d7-4122-b4ea-7e8500405559", "eventTime": "2018-04-17T13:23:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa8e990-172e-453e-8e79-1076df35d8a0", "record_id": "flaws_cloudtrail:0000530:7aa8e990-172e-453e-8e79-1076df35d8a0", "row_index": 530, "timestamp": "2018-04-17T13:23:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa8e990-172e-453e-8e79-1076df35d8a0", "eventTime": "2018-04-17T13:23:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f46833-467d-4dc8-aa52-849e176e1ba1", "record_id": "flaws_cloudtrail:0000531:68f46833-467d-4dc8-aa52-849e176e1ba1", "row_index": 531, "timestamp": "2018-04-17T13:23:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f46833-467d-4dc8-aa52-849e176e1ba1", "eventTime": "2018-04-17T13:23:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7912ffd7-0273-4ec9-b1f0-13b74aa5292d", "record_id": "flaws_cloudtrail:0000532:7912ffd7-0273-4ec9-b1f0-13b74aa5292d", "row_index": 532, "timestamp": "2018-04-17T13:23:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7912ffd7-0273-4ec9-b1f0-13b74aa5292d", "eventTime": "2018-04-17T13:23:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ea748c9-f48b-487c-a10d-d59b71437bc2", "record_id": "flaws_cloudtrail:0000533:0ea748c9-f48b-487c-a10d-d59b71437bc2", "row_index": 533, "timestamp": "2018-04-17T13:23:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ea748c9-f48b-487c-a10d-d59b71437bc2", "eventTime": "2018-04-17T13:23:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd336732-7bbd-4e1e-8107-1d78c6d9b6be", "record_id": "flaws_cloudtrail:0000534:bd336732-7bbd-4e1e-8107-1d78c6d9b6be", "row_index": 534, "timestamp": "2018-04-17T13:23:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd336732-7bbd-4e1e-8107-1d78c6d9b6be", "eventTime": "2018-04-17T13:23:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b12634-f7b9-4c1c-afd0-7fc0501bde3c", "record_id": "flaws_cloudtrail:0000535:b12634-f7b9-4c1c-afd0-7fc0501bde3c", "row_index": 535, "timestamp": "2018-04-17T13:23:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b12634-f7b9-4c1c-afd0-7fc0501bde3c", "eventTime": "2018-04-17T13:23:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2fc457-e454-4e33-a047-f92d2ce68359", "record_id": "flaws_cloudtrail:0000536:9a2fc457-e454-4e33-a047-f92d2ce68359", "row_index": 536, "timestamp": "2018-04-17T13:23:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2fc457-e454-4e33-a047-f92d2ce68359", "eventTime": "2018-04-17T13:23:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac7ad794-d45d-4f16-970a-943da4e2c7b4", "record_id": "flaws_cloudtrail:0000537:ac7ad794-d45d-4f16-970a-943da4e2c7b4", "row_index": 537, "timestamp": "2018-04-17T13:23:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac7ad794-d45d-4f16-970a-943da4e2c7b4", "eventTime": "2018-04-17T13:23:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666e0464-2be8-477d-a60c-55046189be27", "record_id": "flaws_cloudtrail:0000538:666e0464-2be8-477d-a60c-55046189be27", "row_index": 538, "timestamp": "2018-04-17T13:23:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666e0464-2be8-477d-a60c-55046189be27", "eventTime": "2018-04-17T13:23:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db140c1-5144-4ebd-bcd5-e84654b03a6e", "record_id": "flaws_cloudtrail:0000539:3db140c1-5144-4ebd-bcd5-e84654b03a6e", "row_index": 539, "timestamp": "2018-04-17T13:23:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db140c1-5144-4ebd-bcd5-e84654b03a6e", "eventTime": "2018-04-17T13:23:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20936be-9e07-40d9-ae01-852a0f06e999", "record_id": "flaws_cloudtrail:0000540:20936be-9e07-40d9-ae01-852a0f06e999", "row_index": 540, "timestamp": "2018-04-17T13:23:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20936be-9e07-40d9-ae01-852a0f06e999", "eventTime": "2018-04-17T13:23:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a22bbfd-78d4-4abe-9652-f97759cb0", "record_id": "flaws_cloudtrail:0000541:4a22bbfd-78d4-4abe-9652-f97759cb0", "row_index": 541, "timestamp": "2018-04-17T13:23:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1425, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a22bbfd-78d4-4abe-9652-f97759cb0", "eventTime": "2018-04-17T13:23:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb68754-7ed7-49a9-8c58-5a9b9471fdcc", "record_id": "flaws_cloudtrail:0000542:1eb68754-7ed7-49a9-8c58-5a9b9471fdcc", "row_index": 542, "timestamp": "2018-04-17T13:23:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb68754-7ed7-49a9-8c58-5a9b9471fdcc", "eventTime": "2018-04-17T13:23:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a40ea0-b8c4-4769-9450-fa7a2850afa7", "record_id": "flaws_cloudtrail:0000543:47a40ea0-b8c4-4769-9450-fa7a2850afa7", "row_index": 543, "timestamp": "2018-04-17T13:23:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a40ea0-b8c4-4769-9450-fa7a2850afa7", "eventTime": "2018-04-17T13:23:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tDkfguGaMMAd2Pvpkfaubasi5Oyx6DlsW1SJzcAIg-IR_gOp2wHF2SNPhX4u84QlMN6rq6ToBDLLuXZrs5Im_PA2ipCOdP_N-MoYeXdEYHkGgFnZqGybwP69-DqQA-fByRJ-k5-Sm8ShW_sHhNojkctdNG9-WS4insGl2TsMQnyikqOOjuEdecjIRJ8wwxe8tRABNCVRj77NsjXztZsA2huPuAtCHHAs8ePflHH7y4iPriCWrNWKuYX-H4blVBvF3Pmc2K2EYQrtHF95XnTYlxGEy9SgSHOfVKTwMqknmJm92dEk08UIE8_WhTTdsOPXhKhoq3AGx7VUATigGL_MaMIkv-5zSfYIRkZNqdurW9hR04jfNkyRpoLpgTFLe-x12lr84VlyfabsgjCK41AHZSakpbFfATrQhMsUGYW-Oyh64BE7WMxxD1ktZSJ27YFt44gA_-LKVTD4SYCoM3kgU275r0GP3gAnfUlQkq705CkpAvHtdKEV1A0zH4kcg2taiXrRJMrn3_A816gzCJ0oyNwzG1o0tgflhFJ87yG3vUH3dtrzBjlcDYxXrQ-TS-1GRdGZ0Em0rLVlCYZeXe4UNptF6bMe_JXXOowneZRau2rkmUtVE7ObTzQ4_NAt_z0_Nbx0fg8A-imaFmG_LyxGdaef_CuX5yI13w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe05a74-4966-400b-99f1-41d5d2ea087a", "record_id": "flaws_cloudtrail:0000544:dfe05a74-4966-400b-99f1-41d5d2ea087a", "row_index": 544, "timestamp": "2018-04-17T13:23:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe05a74-4966-400b-99f1-41d5d2ea087a", "eventTime": "2018-04-17T13:23:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25bc5642-8166-4062-8ae5-b42094f56e", "record_id": "flaws_cloudtrail:0000545:25bc5642-8166-4062-8ae5-b42094f56e", "row_index": 545, "timestamp": "2018-04-17T13:23:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1427, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25bc5642-8166-4062-8ae5-b42094f56e", "eventTime": "2018-04-17T13:23:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "260deb2b-e70e-4fd5-9a9f-d01430a9bfa1", "record_id": "flaws_cloudtrail:0000546:260deb2b-e70e-4fd5-9a9f-d01430a9bfa1", "row_index": 546, "timestamp": "2018-04-17T13:23:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "260deb2b-e70e-4fd5-9a9f-d01430a9bfa1", "eventTime": "2018-04-17T13:23:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d325922a-c66f-486b-ad97-6ea901f8028e", "record_id": "flaws_cloudtrail:0000547:d325922a-c66f-486b-ad97-6ea901f8028e", "row_index": 547, "timestamp": "2018-04-17T13:23:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d325922a-c66f-486b-ad97-6ea901f8028e", "eventTime": "2018-04-17T13:23:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac1690e7-2d83-4a78-bb39-2c651e3a9e0d", "record_id": "flaws_cloudtrail:0000548:ac1690e7-2d83-4a78-bb39-2c651e3a9e0d", "row_index": 548, "timestamp": "2018-04-17T13:23:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1288, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac1690e7-2d83-4a78-bb39-2c651e3a9e0d", "eventTime": "2018-04-17T13:23:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46438dec-53c2-4943-95e9-839a86c718929", "record_id": "flaws_cloudtrail:0000549:46438dec-53c2-4943-95e9-839a86c718929", "row_index": 549, "timestamp": "2018-04-17T13:23:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46438dec-53c2-4943-95e9-839a86c718929", "eventTime": "2018-04-17T13:23:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af9d8c5-f810-4486-82f0-7448ac488b97", "record_id": "flaws_cloudtrail:0000550:5af9d8c5-f810-4486-82f0-7448ac488b97", "row_index": 550, "timestamp": "2018-04-17T13:23:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af9d8c5-f810-4486-82f0-7448ac488b97", "eventTime": "2018-04-17T13:23:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52d77f7-9a81-4403-9494-576535cb14a87", "record_id": "flaws_cloudtrail:0000551:a52d77f7-9a81-4403-9494-576535cb14a87", "row_index": 551, "timestamp": "2018-04-17T13:23:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1288, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52d77f7-9a81-4403-9494-576535cb14a87", "eventTime": "2018-04-17T13:23:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7264b037-c3e7-4e0f-ab10-4a1a3dc153b9", "record_id": "flaws_cloudtrail:0000552:7264b037-c3e7-4e0f-ab10-4a1a3dc153b9", "row_index": 552, "timestamp": "2018-04-17T13:23:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1327, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7264b037-c3e7-4e0f-ab10-4a1a3dc153b9", "eventTime": "2018-04-17T13:23:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0297b343-ff83-4269-bc5c-078e6561fd6c", "record_id": "flaws_cloudtrail:0000553:0297b343-ff83-4269-bc5c-078e6561fd6c", "row_index": 553, "timestamp": "2018-04-17T13:23:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0297b343-ff83-4269-bc5c-078e6561fd6c", "eventTime": "2018-04-17T13:23:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2f35e94-3a0a-43f3-bcd9-cb4a3bd388a3", "record_id": "flaws_cloudtrail:0000554:b2f35e94-3a0a-43f3-bcd9-cb4a3bd388a3", "row_index": 554, "timestamp": "2018-04-17T13:23:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2f35e94-3a0a-43f3-bcd9-cb4a3bd388a3", "eventTime": "2018-04-17T13:23:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "993b6566-61dc-4877-84d5-536275b9672", "record_id": "flaws_cloudtrail:0000555:993b6566-61dc-4877-84d5-536275b9672", "row_index": 555, "timestamp": "2018-04-17T13:23:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "993b6566-61dc-4877-84d5-536275b9672", "eventTime": "2018-04-17T13:23:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdfcf681-4245-4697-9274-0ef640a1f2a1", "record_id": "flaws_cloudtrail:0000556:fdfcf681-4245-4697-9274-0ef640a1f2a1", "row_index": 556, "timestamp": "2018-04-17T13:23:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdfcf681-4245-4697-9274-0ef640a1f2a1", "eventTime": "2018-04-17T13:23:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ced3842-d2a7-4d93-b036-2c9e71bf6612", "record_id": "flaws_cloudtrail:0000557:6ced3842-d2a7-4d93-b036-2c9e71bf6612", "row_index": 557, "timestamp": "2018-04-17T13:23:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1424, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ced3842-d2a7-4d93-b036-2c9e71bf6612", "eventTime": "2018-04-17T13:23:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d37bdf-ce6f-4e6b-9cbb-06fd19125c70", "record_id": "flaws_cloudtrail:0000558:37d37bdf-ce6f-4e6b-9cbb-06fd19125c70", "row_index": 558, "timestamp": "2018-04-17T13:23:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d37bdf-ce6f-4e6b-9cbb-06fd19125c70", "eventTime": "2018-04-17T13:23:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "626f6c3c-d612-437f-86b8-9dae9d122d1f", "record_id": "flaws_cloudtrail:0000559:626f6c3c-d612-437f-86b8-9dae9d122d1f", "row_index": 559, "timestamp": "2018-04-17T13:24:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "626f6c3c-d612-437f-86b8-9dae9d122d1f", "eventTime": "2018-04-17T13:24:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b06423b-ee15-4212-b743-3b2df9131c91", "record_id": "flaws_cloudtrail:0000560:b06423b-ee15-4212-b743-3b2df9131c91", "row_index": 560, "timestamp": "2018-04-17T13:24:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b06423b-ee15-4212-b743-3b2df9131c91", "eventTime": "2018-04-17T13:24:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08493a7-6db1-40eb-92fb-e80c7aa69f85", "record_id": "flaws_cloudtrail:0000561:08493a7-6db1-40eb-92fb-e80c7aa69f85", "row_index": 561, "timestamp": "2018-04-17T13:24:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08493a7-6db1-40eb-92fb-e80c7aa69f85", "eventTime": "2018-04-17T13:24:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09cc1ebb-d142-402c-aa45-c3a629ec75c0", "record_id": "flaws_cloudtrail:0000562:09cc1ebb-d142-402c-aa45-c3a629ec75c0", "row_index": 562, "timestamp": "2018-04-17T13:24:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09cc1ebb-d142-402c-aa45-c3a629ec75c0", "eventTime": "2018-04-17T13:24:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2mOPbY8NL_JfxrR8YPE9dI3PFtdcCLy2FHGim-Rxkbx4ug7xhydCc_tKlfMEtUUd8KKN4zubmnImWIkQUex-dLtBSNvPyLlxAqhX3Bse3F91sg4SOWxQTWXnwSfGYtAVL5iBy5vet9_F0xlRQDpaWp6crOrJJRIejMIjDQQW2dxQWTp9ESfmecKSK_l4p56n7sTgh7VjPcoxo_6ZcWzoVyj5PmxR2orNpwJO0zg0zouGUZTei6y3P8Ix6oHDtPHxiKJZRXENLaaP5-H1I5laW9I7SJx8ZdtXaIDdizwW3c6UIeki-N1aw5wisTHJ371R2yTRVTAtSHv8MFgUabMqa-qPJurid5VAQ1t9KWTREqte-W8v4JUKiifx7CXOlq22oB4LsFwBWgzbBmj8kM3vJtsTdjlPpT3anc_eXRl5zZhljTr9Oxi8zfvTe9sZeBycP9jcKGMbwe4nM-OICqaJaWsgdzcV_-mfv9f64RQFzO9BSOu1bhdKU9kS3o48nP1jaBcCUvX-2YtirtJ8-lMZGgr0cJVXL75xusZW7d-H4m5cOFTm_5KJKHGjizdN3wlzbvXfqTuO-sERgarv4sDAsMxGKdooeyPI9Q5mKhTtaM_rzAGCIxSyC5MQ7Yjl-3gsLIcTEixsKiWoRBRJ4i4w8e-2RB1n73IGqLk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93a53f7-c484-4ddf-8a60-d015166d24ad", "record_id": "flaws_cloudtrail:0000563:a93a53f7-c484-4ddf-8a60-d015166d24ad", "row_index": 563, "timestamp": "2018-04-17T13:24:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93a53f7-c484-4ddf-8a60-d015166d24ad", "eventTime": "2018-04-17T13:24:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063ea11e-a61e-4ead-a8cb-e56bfcbbaecf", "record_id": "flaws_cloudtrail:0000564:063ea11e-a61e-4ead-a8cb-e56bfcbbaecf", "row_index": 564, "timestamp": "2018-04-17T13:24:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063ea11e-a61e-4ead-a8cb-e56bfcbbaecf", "eventTime": "2018-04-17T13:24:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43f4874-4ac9-4b9b-8978-32980b4b7708", "record_id": "flaws_cloudtrail:0000565:a43f4874-4ac9-4b9b-8978-32980b4b7708", "row_index": 565, "timestamp": "2018-04-17T13:24:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1427, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43f4874-4ac9-4b9b-8978-32980b4b7708", "eventTime": "2018-04-17T13:24:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "936ce87a-3d44-45f1-a20a-0fa3d1bf39a1", "record_id": "flaws_cloudtrail:0000566:936ce87a-3d44-45f1-a20a-0fa3d1bf39a1", "row_index": 566, "timestamp": "2018-04-17T13:24:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1427, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "936ce87a-3d44-45f1-a20a-0fa3d1bf39a1", "eventTime": "2018-04-17T13:24:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97274e-70d4-4827-8500-cbdcc9d54e67", "record_id": "flaws_cloudtrail:0000567:b97274e-70d4-4827-8500-cbdcc9d54e67", "row_index": 567, "timestamp": "2018-04-17T13:24:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97274e-70d4-4827-8500-cbdcc9d54e67", "eventTime": "2018-04-17T13:24:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d141a7d-e426-4def-b89a-aaea7719deca", "record_id": "flaws_cloudtrail:0000568:6d141a7d-e426-4def-b89a-aaea7719deca", "row_index": 568, "timestamp": "2018-04-17T13:24:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d141a7d-e426-4def-b89a-aaea7719deca", "eventTime": "2018-04-17T13:24:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c5ecc4-393f-4852-8884-432268c9ba30", "record_id": "flaws_cloudtrail:0000569:c7c5ecc4-393f-4852-8884-432268c9ba30", "row_index": 569, "timestamp": "2018-04-17T13:24:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c5ecc4-393f-4852-8884-432268c9ba30", "eventTime": "2018-04-17T13:24:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2d880286-d0a4-4d87-b2cc-c91fb9616ba2", "record_id": "flaws_cloudtrail:0000570:b2d880286-d0a4-4d87-b2cc-c91fb9616ba2", "row_index": 570, "timestamp": "2018-04-17T13:24:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2d880286-d0a4-4d87-b2cc-c91fb9616ba2", "eventTime": "2018-04-17T13:24:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6af87a7f-618e-47c2-b5f5-41e4892baf8b", "record_id": "flaws_cloudtrail:0000571:6af87a7f-618e-47c2-b5f5-41e4892baf8b", "row_index": 571, "timestamp": "2018-04-17T13:24:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6af87a7f-618e-47c2-b5f5-41e4892baf8b", "eventTime": "2018-04-17T13:24:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2614ec55-71d8-4dac-a885-7ebab33d4fdb", "record_id": "flaws_cloudtrail:0000572:2614ec55-71d8-4dac-a885-7ebab33d4fdb", "row_index": 572, "timestamp": "2018-04-17T13:24:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2614ec55-71d8-4dac-a885-7ebab33d4fdb", "eventTime": "2018-04-17T13:24:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "272f44d5-0620-4a0f-b6c0-72b46a27d01f", "record_id": "flaws_cloudtrail:0000573:272f44d5-0620-4a0f-b6c0-72b46a27d01f", "row_index": 573, "timestamp": "2018-04-17T13:24:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1331, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "272f44d5-0620-4a0f-b6c0-72b46a27d01f", "eventTime": "2018-04-17T13:24:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient i3.16xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a862ae3c-62b4-4ee4-aab4-38f0e3b50815", "record_id": "flaws_cloudtrail:0000574:a862ae3c-62b4-4ee4-aab4-38f0e3b50815", "row_index": 574, "timestamp": "2018-04-17T13:24:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a862ae3c-62b4-4ee4-aab4-38f0e3b50815", "eventTime": "2018-04-17T13:24:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1da891-ac5e-4e8d-84a6-2db5fd974860", "record_id": "flaws_cloudtrail:0000575:1a1da891-ac5e-4e8d-84a6-2db5fd974860", "row_index": 575, "timestamp": "2018-04-17T13:24:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1da891-ac5e-4e8d-84a6-2db5fd974860", "eventTime": "2018-04-17T13:24:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "191013d35-5b79-462c-b484-13de1d89e7af", "record_id": "flaws_cloudtrail:0000576:191013d35-5b79-462c-b484-13de1d89e7af", "row_index": 576, "timestamp": "2018-04-17T13:24:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1288, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "191013d35-5b79-462c-b484-13de1d89e7af", "eventTime": "2018-04-17T13:24:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "532584c1-51b3-4470-b0f3-2a65e50045", "record_id": "flaws_cloudtrail:0000577:532584c1-51b3-4470-b0f3-2a65e50045", "row_index": 577, "timestamp": "2018-04-17T13:24:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "532584c1-51b3-4470-b0f3-2a65e50045", "eventTime": "2018-04-17T13:24:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b02700bc-6c62-406a-9e01-aeaa0e9461bb", "record_id": "flaws_cloudtrail:0000578:b02700bc-6c62-406a-9e01-aeaa0e9461bb", "row_index": 578, "timestamp": "2018-04-17T13:24:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b02700bc-6c62-406a-9e01-aeaa0e9461bb", "eventTime": "2018-04-17T13:24:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df4e14b-7baf-4720-b96b-ece289d7dae8", "record_id": "flaws_cloudtrail:0000579:8df4e14b-7baf-4720-b96b-ece289d7dae8", "row_index": 579, "timestamp": "2018-04-17T13:24:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df4e14b-7baf-4720-b96b-ece289d7dae8", "eventTime": "2018-04-17T13:24:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf6f4b8-1fe0-4894-b74c-fab1bcc53eee", "record_id": "flaws_cloudtrail:0000580:bcf6f4b8-1fe0-4894-b74c-fab1bcc53eee", "row_index": 580, "timestamp": "2018-04-17T13:24:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf6f4b8-1fe0-4894-b74c-fab1bcc53eee", "eventTime": "2018-04-17T13:24:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "015bcd2b-dc10-4797-89e2-8665db471833a", "record_id": "flaws_cloudtrail:0000581:015bcd2b-dc10-4797-89e2-8665db471833a", "row_index": 581, "timestamp": "2018-04-17T13:24:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "015bcd2b-dc10-4797-89e2-8665db471833a", "eventTime": "2018-04-17T13:24:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88409-a59b-475b-ad4c-fe697aa96089", "record_id": "flaws_cloudtrail:0000582:88409-a59b-475b-ad4c-fe697aa96089", "row_index": 582, "timestamp": "2018-04-17T13:24:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88409-a59b-475b-ad4c-fe697aa96089", "eventTime": "2018-04-17T13:24:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da91285-2ea1-4b37-a21f-2f11cc5ceb16", "record_id": "flaws_cloudtrail:0000583:da91285-2ea1-4b37-a21f-2f11cc5ceb16", "row_index": 583, "timestamp": "2018-04-17T13:24:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da91285-2ea1-4b37-a21f-2f11cc5ceb16", "eventTime": "2018-04-17T13:24:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b878113f6-357c-48f5-acd3-5fd226427e4d8", "record_id": "flaws_cloudtrail:0000584:b878113f6-357c-48f5-acd3-5fd226427e4d8", "row_index": 584, "timestamp": "2018-04-17T13:24:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1432, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b878113f6-357c-48f5-acd3-5fd226427e4d8", "eventTime": "2018-04-17T13:24:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d557b6b-dd6b-4d87-adc4-0c23592b4058", "record_id": "flaws_cloudtrail:0000585:4d557b6b-dd6b-4d87-adc4-0c23592b4058", "row_index": 585, "timestamp": "2018-04-17T13:24:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d557b6b-dd6b-4d87-adc4-0c23592b4058", "eventTime": "2018-04-17T13:24:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8c8f8c-df4b-4290-9365-146b96cb80f3", "record_id": "flaws_cloudtrail:0000586:eb8c8f8c-df4b-4290-9365-146b96cb80f3", "row_index": 586, "timestamp": "2018-04-17T13:25:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8c8f8c-df4b-4290-9365-146b96cb80f3", "eventTime": "2018-04-17T13:25:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547311a-8ce8-4585-bd70-241192b8a3ab", "record_id": "flaws_cloudtrail:0000587:547311a-8ce8-4585-bd70-241192b8a3ab", "row_index": 587, "timestamp": "2018-04-17T13:25:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1287, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547311a-8ce8-4585-bd70-241192b8a3ab", "eventTime": "2018-04-17T13:25:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "Insufficient capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df9f5b0-5b50-4297-bc00-8a852093fc47", "record_id": "flaws_cloudtrail:0000588:5df9f5b0-5b50-4297-bc00-8a852093fc47", "row_index": 588, "timestamp": "2018-04-17T13:25:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df9f5b0-5b50-4297-bc00-8a852093fc47", "eventTime": "2018-04-17T13:25:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eebef027-7f2e-4f8b-b87a-1c3aca673370", "record_id": "flaws_cloudtrail:0000589:eebef027-7f2e-4f8b-b87a-1c3aca673370", "row_index": 589, "timestamp": "2018-04-17T13:25:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1427, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eebef027-7f2e-4f8b-b87a-1c3aca673370", "eventTime": "2018-04-17T13:25:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc9e5392-124b-4b9d-942b-b4a16ce7e73d", "record_id": "flaws_cloudtrail:0000590:cc9e5392-124b-4b9d-942b-b4a16ce7e73d", "row_index": 590, "timestamp": "2018-04-17T13:25:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc9e5392-124b-4b9d-942b-b4a16ce7e73d", "eventTime": "2018-04-17T13:25:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dW8sKRWvkoA1EyegepMnQ9BVIOqmlIyn3AQxS7F871JejZz43pfNnfgyPPrqtA9YP6eFcIVLiE-UHhsWtgfmVPyufzyVO3fRs-Vk6p11d6Hx_Iz3HNww6njnLA37CrWsuTQKEV5vFCBtBntt42neAlCQhj30QKKv_QWOvMqAhmGSGkL7N7NwWdNfQTyuKr49doOwCS2KUWSAjKQ9h587EqpN5GPTatGCsYrr233NSrh88Tv0Ufd8e6w6g8zNdX_hKNYzpdw2T4ufn0LjJB1LOA_iEqJqlk1GJJTBfm7nOO-F0JD2KJ7i7ar07D1tGdo_xf8EVKiInVg6Rf78Fse48r1hIqDCc61pL_zGEvPPmXYrvD8R-SatPg_P8rG9FqGOtzgW1cGPc6qIRAm8O6ZydIcBrIihPxhGrpjfgWIyB7F2MZuPXrBVssq8h6M8iI8p9JoKTC9xkNiSY-r4_1d96hOfJk7HIp6l-baUoExgdvQjH8kRPmLfuV7n88xtdsOSaAsao9hhriZQ3vmGqrqR-uobYXkL89zxE6q6lr0ptGJZrVOXSwnyPoQd1qyDKS9ZsXWRNZeon2SrZsNU9IHB6z6xWIGQbAHAiUdQgk_I_tm05hrtQAf5ffAHk4PE-aIHPT0QgVmqs4AzjE-S199QHpvubLcd81cjtw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9a1509-f8e1-49d9-828a-2f119d4f6077", "record_id": "flaws_cloudtrail:0000591:0f9a1509-f8e1-49d9-828a-2f119d4f6077", "row_index": 591, "timestamp": "2018-04-17T13:25:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1426, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9a1509-f8e1-49d9-828a-2f119d4f6077", "eventTime": "2018-04-17T13:25:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f792700a3-571b-4dae-af07-d968ff9207cc", "record_id": "flaws_cloudtrail:0000592:f792700a3-571b-4dae-af07-d968ff9207cc", "row_index": 592, "timestamp": "2018-04-17T13:25:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f792700a3-571b-4dae-af07-d968ff9207cc", "eventTime": "2018-04-17T13:25:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550abb8e-9d0f-4a7a-bbe6-7cbd23c218db", "record_id": "flaws_cloudtrail:0000593:550abb8e-9d0f-4a7a-bbe6-7cbd23c218db", "row_index": 593, "timestamp": "2018-04-17T13:25:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550abb8e-9d0f-4a7a-bbe6-7cbd23c218db", "eventTime": "2018-04-17T13:25:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38a3f449-fa7b-494a-8bd8-61566b13118", "record_id": "flaws_cloudtrail:0000594:38a3f449-fa7b-494a-8bd8-61566b13118", "row_index": 594, "timestamp": "2018-04-17T13:25:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38a3f449-fa7b-494a-8bd8-61566b13118", "eventTime": "2018-04-17T13:25:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "443db17e-bbc0-4c77-bd69-fd2af3874e40", "record_id": "flaws_cloudtrail:0000595:443db17e-bbc0-4c77-bd69-fd2af3874e40", "row_index": 595, "timestamp": "2018-04-17T13:25:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "443db17e-bbc0-4c77-bd69-fd2af3874e40", "eventTime": "2018-04-17T13:25:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0be29ff7-81ae-4569-aa45-1261f4f8e54d", "record_id": "flaws_cloudtrail:0000596:0be29ff7-81ae-4569-aa45-1261f4f8e54d", "row_index": 596, "timestamp": "2018-04-17T13:25:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0be29ff7-81ae-4569-aa45-1261f4f8e54d", "eventTime": "2018-04-17T13:25:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b97480-ef62-4c5a-ab99-9830c196c688", "record_id": "flaws_cloudtrail:0000597:18b97480-ef62-4c5a-ab99-9830c196c688", "row_index": 597, "timestamp": "2018-04-17T13:25:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1427, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b97480-ef62-4c5a-ab99-9830c196c688", "eventTime": "2018-04-17T13:25:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "323d3ad3-a1a4-439d-8b48-cfe28184a9a", "record_id": "flaws_cloudtrail:0000598:323d3ad3-a1a4-439d-8b48-cfe28184a9a", "row_index": 598, "timestamp": "2018-04-17T13:25:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "323d3ad3-a1a4-439d-8b48-cfe28184a9a", "eventTime": "2018-04-17T13:25:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ec5bec6-804f-4324-98f9-21959b74c63", "record_id": "flaws_cloudtrail:0000599:3ec5bec6-804f-4324-98f9-21959b74c63", "row_index": 599, "timestamp": "2018-04-17T13:25:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ec5bec6-804f-4324-98f9-21959b74c63", "eventTime": "2018-04-17T13:25:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ad165904-8c68-4e80-a7d0-886aa9435c10", "record_id": "flaws_cloudtrail:0000600:3ad165904-8c68-4e80-a7d0-886aa9435c10", "row_index": 600, "timestamp": "2018-04-17T13:25:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ad165904-8c68-4e80-a7d0-886aa9435c10", "eventTime": "2018-04-17T13:25:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16236bb3-35d0-4f5b-82cc-606da809ac94", "record_id": "flaws_cloudtrail:0000601:16236bb3-35d0-4f5b-82cc-606da809ac94", "row_index": 601, "timestamp": "2018-04-17T13:25:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16236bb3-35d0-4f5b-82cc-606da809ac94", "eventTime": "2018-04-17T13:25:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b1af49-0b15-4c8f-8104-e91b186610f5", "record_id": "flaws_cloudtrail:0000602:79b1af49-0b15-4c8f-8104-e91b186610f5", "row_index": 602, "timestamp": "2018-04-17T13:25:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b1af49-0b15-4c8f-8104-e91b186610f5", "eventTime": "2018-04-17T13:25:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fc7b892-8a48-4a78-b99d-f9d0a6940b83", "record_id": "flaws_cloudtrail:0000603:3fc7b892-8a48-4a78-b99d-f9d0a6940b83", "row_index": 603, "timestamp": "2018-04-17T13:25:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fc7b892-8a48-4a78-b99d-f9d0a6940b83", "eventTime": "2018-04-17T13:25:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9f4a1f3-29a7-4142-8afb-3d6195ef3340", "record_id": "flaws_cloudtrail:0000604:b9f4a1f3-29a7-4142-8afb-3d6195ef3340", "row_index": 604, "timestamp": "2018-04-17T13:25:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9f4a1f3-29a7-4142-8afb-3d6195ef3340", "eventTime": "2018-04-17T13:25:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29f7469e-c44d-4ed7-aa96-60bb9d51775", "record_id": "flaws_cloudtrail:0000605:29f7469e-c44d-4ed7-aa96-60bb9d51775", "row_index": 605, "timestamp": "2018-04-17T13:25:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1428, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29f7469e-c44d-4ed7-aa96-60bb9d51775", "eventTime": "2018-04-17T13:25:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90cab0d-942e-4b5e-a150-a26011a58d7f", "record_id": "flaws_cloudtrail:0000606:b90cab0d-942e-4b5e-a150-a26011a58d7f", "row_index": 606, "timestamp": "2018-04-17T13:25:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90cab0d-942e-4b5e-a150-a26011a58d7f", "eventTime": "2018-04-17T13:25:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11e4cef6-de5a-429d-8fec-f25bc2ae2db0", "record_id": "flaws_cloudtrail:0000607:11e4cef6-de5a-429d-8fec-f25bc2ae2db0", "row_index": 607, "timestamp": "2018-04-17T13:25:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1430, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11e4cef6-de5a-429d-8fec-f25bc2ae2db0", "eventTime": "2018-04-17T13:25:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd72cb83-bbbf-4ace-8d00-2d023e8e2ad2", "record_id": "flaws_cloudtrail:0000608:fd72cb83-bbbf-4ace-8d00-2d023e8e2ad2", "row_index": 608, "timestamp": "2018-04-17T13:25:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd72cb83-bbbf-4ace-8d00-2d023e8e2ad2", "eventTime": "2018-04-17T13:25:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f83b0e3c-e217-4d42-a876-a1655afa1a0a", "record_id": "flaws_cloudtrail:0000609:f83b0e3c-e217-4d42-a876-a1655afa1a0a", "row_index": 609, "timestamp": "2018-04-17T13:25:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f83b0e3c-e217-4d42-a876-a1655afa1a0a", "eventTime": "2018-04-17T13:25:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cc7f512-3280-43a7-b112-10dcb8f6fdc4", "record_id": "flaws_cloudtrail:0000610:8cc7f512-3280-43a7-b112-10dcb8f6fdc4", "row_index": 610, "timestamp": "2018-04-17T13:25:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cc7f512-3280-43a7-b112-10dcb8f6fdc4", "eventTime": "2018-04-17T13:25:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a15f4de-9107-490b-ae84-5e27f310474f", "record_id": "flaws_cloudtrail:0000611:0a15f4de-9107-490b-ae84-5e27f310474f", "row_index": 611, "timestamp": "2018-04-17T13:26:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1429, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a15f4de-9107-490b-ae84-5e27f310474f", "eventTime": "2018-04-17T13:26:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Server.InsufficientInstanceCapacity", "errorMessage": "We currently do not have sufficient c5.18xlarge capacity in zones with support for 'gp2' volumes. Our system will be working on provisioning additional capacity.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}