Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c37dd401-52a8-4067-86a7-0135e960d902", "record_id": "flaws_cloudtrail:0000000:c37dd401-52a8-4067-86a7-0135e960d902", "row_index": 0, "timestamp": "2018-07-12T14:49:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c37dd401-52a8-4067-86a7-0135e960d902", "eventTime": "2018-07-12T14:49:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a253927-6936-497f-ac4d-c4fb270a8272", "record_id": "flaws_cloudtrail:0000001:4a253927-6936-497f-ac4d-c4fb270a8272", "row_index": 1, "timestamp": "2018-07-12T14:49:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a253927-6936-497f-ac4d-c4fb270a8272", "eventTime": "2018-07-12T14:49:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1c9043-f15a-4583-a968-dfaaa664297ec", "record_id": "flaws_cloudtrail:0000002:7e1c9043-f15a-4583-a968-dfaaa664297ec", "row_index": 2, "timestamp": "2018-07-12T14:49:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1c9043-f15a-4583-a968-dfaaa664297ec", "eventTime": "2018-07-12T14:49:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "570bc092-dc2c-4685-9736-6bb5ab0baebe", "record_id": "flaws_cloudtrail:0000003:570bc092-dc2c-4685-9736-6bb5ab0baebe", "row_index": 3, "timestamp": "2018-07-12T14:49:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "570bc092-dc2c-4685-9736-6bb5ab0baebe", "eventTime": "2018-07-12T14:49:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41605-8cf4-4804-aa63-0217f7bb8fb4", "record_id": "flaws_cloudtrail:0000004:f41605-8cf4-4804-aa63-0217f7bb8fb4", "row_index": 4, "timestamp": "2018-07-12T14:49:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41605-8cf4-4804-aa63-0217f7bb8fb4", "eventTime": "2018-07-12T14:49:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99da023a-7e70-438a-8825-a5b8c75919f", "record_id": "flaws_cloudtrail:0000005:99da023a-7e70-438a-8825-a5b8c75919f", "row_index": 5, "timestamp": "2018-07-12T14:49:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99da023a-7e70-438a-8825-a5b8c75919f", "eventTime": "2018-07-12T14:49:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04f79258-ed6f-4520-bad8-044bbd9ec6b9", "record_id": "flaws_cloudtrail:0000006:04f79258-ed6f-4520-bad8-044bbd9ec6b9", "row_index": 6, "timestamp": "2018-07-12T14:49:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04f79258-ed6f-4520-bad8-044bbd9ec6b9", "eventTime": "2018-07-12T14:49:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a29a06da-6143-4b69-80a8-8c8e6a0f10a2", "record_id": "flaws_cloudtrail:0000007:a29a06da-6143-4b69-80a8-8c8e6a0f10a2", "row_index": 7, "timestamp": "2018-07-12T14:49:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a29a06da-6143-4b69-80a8-8c8e6a0f10a2", "eventTime": "2018-07-12T14:49:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67ac2448-48e5-4965-9ceb-713dcb827299", "record_id": "flaws_cloudtrail:0000008:67ac2448-48e5-4965-9ceb-713dcb827299", "row_index": 8, "timestamp": "2018-07-12T14:49:30Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67ac2448-48e5-4965-9ceb-713dcb827299", "eventTime": "2018-07-12T14:49:30Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3afbbfc-b96f-42ec-ad8b-39c17c41a6fa", "record_id": "flaws_cloudtrail:0000009:c3afbbfc-b96f-42ec-ad8b-39c17c41a6fa", "row_index": 9, "timestamp": "2018-07-12T14:49:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3afbbfc-b96f-42ec-ad8b-39c17c41a6fa", "eventTime": "2018-07-12T14:49:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bbd5109-30e6-4b39-85f6-fb838cd71ed7", "record_id": "flaws_cloudtrail:0000010:7bbd5109-30e6-4b39-85f6-fb838cd71ed7", "row_index": 10, "timestamp": "2018-07-12T14:49:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bbd5109-30e6-4b39-85f6-fb838cd71ed7", "eventTime": "2018-07-12T14:49:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e23edf57-73ba-49b5-a322-c6c404123bf", "record_id": "flaws_cloudtrail:0000011:e23edf57-73ba-49b5-a322-c6c404123bf", "row_index": 11, "timestamp": "2018-07-12T14:49:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e23edf57-73ba-49b5-a322-c6c404123bf", "eventTime": "2018-07-12T14:49:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53163a4-35a5-4e03-93ce-6786f6f904b6", "record_id": "flaws_cloudtrail:0000012:53163a4-35a5-4e03-93ce-6786f6f904b6", "row_index": 12, "timestamp": "2018-07-12T14:49:36Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53163a4-35a5-4e03-93ce-6786f6f904b6", "eventTime": "2018-07-12T14:49:36Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22c3ddc-9894-47ed-8160-aabc514766e2", "record_id": "flaws_cloudtrail:0000013:e22c3ddc-9894-47ed-8160-aabc514766e2", "row_index": 13, "timestamp": "2018-07-12T14:49:38Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22c3ddc-9894-47ed-8160-aabc514766e2", "eventTime": "2018-07-12T14:49:38Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd6fa06-51ce-4554-b6b9-211a0ac542d4", "record_id": "flaws_cloudtrail:0000014:bcd6fa06-51ce-4554-b6b9-211a0ac542d4", "row_index": 14, "timestamp": "2018-07-12T14:49:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd6fa06-51ce-4554-b6b9-211a0ac542d4", "eventTime": "2018-07-12T14:49:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72da9490-7930-4adb-b711-ef2208f7044a", "record_id": "flaws_cloudtrail:0000015:72da9490-7930-4adb-b711-ef2208f7044a", "row_index": 15, "timestamp": "2018-07-12T14:49:43Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72da9490-7930-4adb-b711-ef2208f7044a", "eventTime": "2018-07-12T14:49:43Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e6a084f-de3c-4ba6-9262-3f3e36d5569c", "record_id": "flaws_cloudtrail:0000016:6e6a084f-de3c-4ba6-9262-3f3e36d5569c", "row_index": 16, "timestamp": "2018-07-12T14:49:44Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e6a084f-de3c-4ba6-9262-3f3e36d5569c", "eventTime": "2018-07-12T14:49:44Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeca55d9-6bf0-4ccb-b834-ee12152df641", "record_id": "flaws_cloudtrail:0000017:eeca55d9-6bf0-4ccb-b834-ee12152df641", "row_index": 17, "timestamp": "2018-07-12T14:49:46Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeca55d9-6bf0-4ccb-b834-ee12152df641", "eventTime": "2018-07-12T14:49:46Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90773fc1-c5d3-4826-8519-4c19ac533e07", "record_id": "flaws_cloudtrail:0000018:90773fc1-c5d3-4826-8519-4c19ac533e07", "row_index": 18, "timestamp": "2018-07-12T14:49:47Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90773fc1-c5d3-4826-8519-4c19ac533e07", "eventTime": "2018-07-12T14:49:47Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a03a213-3fc8-4d6d-ab95-5f29328b1e82", "record_id": "flaws_cloudtrail:0000019:3a03a213-3fc8-4d6d-ab95-5f29328b1e82", "row_index": 19, "timestamp": "2018-07-12T14:49:48Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a03a213-3fc8-4d6d-ab95-5f29328b1e82", "eventTime": "2018-07-12T14:49:48Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "256c35ef-b076-4153-9765-03328f7", "record_id": "flaws_cloudtrail:0000020:256c35ef-b076-4153-9765-03328f7", "row_index": 20, "timestamp": "2018-07-12T14:49:50Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "256c35ef-b076-4153-9765-03328f7", "eventTime": "2018-07-12T14:49:50Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20d142e0-6230-493e-bdd6-9618d874e02b", "record_id": "flaws_cloudtrail:0000021:20d142e0-6230-493e-bdd6-9618d874e02b", "row_index": 21, "timestamp": "2018-07-12T14:49:51Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20d142e0-6230-493e-bdd6-9618d874e02b", "eventTime": "2018-07-12T14:49:51Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfcb08f5-4768-450b-b5a0-ba15d7c3aeec", "record_id": "flaws_cloudtrail:0000022:cfcb08f5-4768-450b-b5a0-ba15d7c3aeec", "row_index": 22, "timestamp": "2018-07-12T14:49:52Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfcb08f5-4768-450b-b5a0-ba15d7c3aeec", "eventTime": "2018-07-12T14:49:52Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d81a13fc-f02f-48bb-ae37-5c2179f1208e", "record_id": "flaws_cloudtrail:0000023:d81a13fc-f02f-48bb-ae37-5c2179f1208e", "row_index": 23, "timestamp": "2018-07-12T14:49:53Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d81a13fc-f02f-48bb-ae37-5c2179f1208e", "eventTime": "2018-07-12T14:49:53Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a9dcced-337d-4416-be62-5993dca68e80", "record_id": "flaws_cloudtrail:0000024:4a9dcced-337d-4416-be62-5993dca68e80", "row_index": 24, "timestamp": "2018-07-12T14:49:55Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a9dcced-337d-4416-be62-5993dca68e80", "eventTime": "2018-07-12T14:49:55Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f239e1e-1d55-4a81-9139-ba6146a7bf27", "record_id": "flaws_cloudtrail:0000025:3f239e1e-1d55-4a81-9139-ba6146a7bf27", "row_index": 25, "timestamp": "2018-07-12T14:49:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f239e1e-1d55-4a81-9139-ba6146a7bf27", "eventTime": "2018-07-12T14:49:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c21152-925d-4282-bd16-1add642bd164", "record_id": "flaws_cloudtrail:0000026:b8c21152-925d-4282-bd16-1add642bd164", "row_index": 26, "timestamp": "2018-07-12T14:49:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c21152-925d-4282-bd16-1add642bd164", "eventTime": "2018-07-12T14:49:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fed75d8-9e00-45c0-844c-0e8ddb31384f", "record_id": "flaws_cloudtrail:0000027:3fed75d8-9e00-45c0-844c-0e8ddb31384f", "row_index": 27, "timestamp": "2018-07-12T14:50:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fed75d8-9e00-45c0-844c-0e8ddb31384f", "eventTime": "2018-07-12T14:50:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee3d26b3-ab8f-455d-b982-1ce46456a0", "record_id": "flaws_cloudtrail:0000028:ee3d26b3-ab8f-455d-b982-1ce46456a0", "row_index": 28, "timestamp": "2018-07-12T14:50:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee3d26b3-ab8f-455d-b982-1ce46456a0", "eventTime": "2018-07-12T14:50:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ad4bf4-a920-4693-9930-735758ec", "record_id": "flaws_cloudtrail:0000029:00ad4bf4-a920-4693-9930-735758ec", "row_index": 29, "timestamp": "2018-07-12T14:50:04Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ad4bf4-a920-4693-9930-735758ec", "eventTime": "2018-07-12T14:50:04Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ced9e4-3daf-4a07-a969-07fdbee376a3", "record_id": "flaws_cloudtrail:0000030:d1ced9e4-3daf-4a07-a969-07fdbee376a3", "row_index": 30, "timestamp": "2018-07-12T14:50:06Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ced9e4-3daf-4a07-a969-07fdbee376a3", "eventTime": "2018-07-12T14:50:06Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21029ce-615a-407a-897f-450812e19091", "record_id": "flaws_cloudtrail:0000031:21029ce-615a-407a-897f-450812e19091", "row_index": 31, "timestamp": "2018-07-12T14:50:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21029ce-615a-407a-897f-450812e19091", "eventTime": "2018-07-12T14:50:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "087bdad4-34fe-4e09-8e78-337b400d8099", "record_id": "flaws_cloudtrail:0000032:087bdad4-34fe-4e09-8e78-337b400d8099", "row_index": 32, "timestamp": "2018-07-12T14:50:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "087bdad4-34fe-4e09-8e78-337b400d8099", "eventTime": "2018-07-12T14:50:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2ee6b89-636a-47ec-93a8-e07d07337f0d", "record_id": "flaws_cloudtrail:0000033:d2ee6b89-636a-47ec-93a8-e07d07337f0d", "row_index": 33, "timestamp": "2018-07-12T14:50:10Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2ee6b89-636a-47ec-93a8-e07d07337f0d", "eventTime": "2018-07-12T14:50:10Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd818b69-4368-47dd-90c5-a8e974380dbc8", "record_id": "flaws_cloudtrail:0000034:fd818b69-4368-47dd-90c5-a8e974380dbc8", "row_index": 34, "timestamp": "2018-07-12T14:50:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd818b69-4368-47dd-90c5-a8e974380dbc8", "eventTime": "2018-07-12T14:50:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7fc3cc3-26fc-437b-8936-afd1626e72b1", "record_id": "flaws_cloudtrail:0000035:a7fc3cc3-26fc-437b-8936-afd1626e72b1", "row_index": 35, "timestamp": "2018-07-12T14:50:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7fc3cc3-26fc-437b-8936-afd1626e72b1", "eventTime": "2018-07-12T14:50:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf93e732-2d28-48e2-9b3b-ce20bf227c5a", "record_id": "flaws_cloudtrail:0000036:cf93e732-2d28-48e2-9b3b-ce20bf227c5a", "row_index": 36, "timestamp": "2018-07-12T14:50:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf93e732-2d28-48e2-9b3b-ce20bf227c5a", "eventTime": "2018-07-12T14:50:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b14436-6f04-49a1-853a-1664bca0e5c8", "record_id": "flaws_cloudtrail:0000037:7b14436-6f04-49a1-853a-1664bca0e5c8", "row_index": 37, "timestamp": "2018-07-12T14:50:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b14436-6f04-49a1-853a-1664bca0e5c8", "eventTime": "2018-07-12T14:50:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996b4da0-ef20-486d-9ad3-5e291272d2a90", "record_id": "flaws_cloudtrail:0000038:996b4da0-ef20-486d-9ad3-5e291272d2a90", "row_index": 38, "timestamp": "2018-07-12T14:50:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996b4da0-ef20-486d-9ad3-5e291272d2a90", "eventTime": "2018-07-12T14:50:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a9e895b-000a-4a30-b4dc-f5bc2a93dec4", "record_id": "flaws_cloudtrail:0000039:6a9e895b-000a-4a30-b4dc-f5bc2a93dec4", "row_index": 39, "timestamp": "2018-07-12T14:50:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a9e895b-000a-4a30-b4dc-f5bc2a93dec4", "eventTime": "2018-07-12T14:50:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a907a1b-d039-4751-bfe6-f91660c42", "record_id": "flaws_cloudtrail:0000040:4a907a1b-d039-4751-bfe6-f91660c42", "row_index": 40, "timestamp": "2018-07-12T14:50:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a907a1b-d039-4751-bfe6-f91660c42", "eventTime": "2018-07-12T14:50:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0efd81df-edee-433d-a943-c486580e", "record_id": "flaws_cloudtrail:0000041:0efd81df-edee-433d-a943-c486580e", "row_index": 41, "timestamp": "2018-07-12T14:50:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0efd81df-edee-433d-a943-c486580e", "eventTime": "2018-07-12T14:50:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067e08b8-36dd-4756-bbf7-c955b62a1b66", "record_id": "flaws_cloudtrail:0000042:067e08b8-36dd-4756-bbf7-c955b62a1b66", "row_index": 42, "timestamp": "2018-07-12T14:50:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067e08b8-36dd-4756-bbf7-c955b62a1b66", "eventTime": "2018-07-12T14:50:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10356c0a-44a1-44fa-981e-f737edbac5f2", "record_id": "flaws_cloudtrail:0000043:10356c0a-44a1-44fa-981e-f737edbac5f2", "row_index": 43, "timestamp": "2018-07-12T14:50:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10356c0a-44a1-44fa-981e-f737edbac5f2", "eventTime": "2018-07-12T14:50:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544f61a8-fcd2-4c2f-9262-900a170cdaad", "record_id": "flaws_cloudtrail:0000044:544f61a8-fcd2-4c2f-9262-900a170cdaad", "row_index": 44, "timestamp": "2018-07-12T14:50:27Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544f61a8-fcd2-4c2f-9262-900a170cdaad", "eventTime": "2018-07-12T14:50:27Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8820bb63-ea10-4563-beae-acd646d23b02", "record_id": "flaws_cloudtrail:0000045:8820bb63-ea10-4563-beae-acd646d23b02", "row_index": 45, "timestamp": "2018-07-12T14:50:28Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8820bb63-ea10-4563-beae-acd646d23b02", "eventTime": "2018-07-12T14:50:28Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401bb61a-1e21-462e-8968-93f722efab97", "record_id": "flaws_cloudtrail:0000046:401bb61a-1e21-462e-8968-93f722efab97", "row_index": 46, "timestamp": "2018-07-12T14:50:29Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401bb61a-1e21-462e-8968-93f722efab97", "eventTime": "2018-07-12T14:50:29Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0570fde3-83b2-4495-aa0e-5e6d4a4e209d", "record_id": "flaws_cloudtrail:0000047:0570fde3-83b2-4495-aa0e-5e6d4a4e209d", "row_index": 47, "timestamp": "2018-07-12T14:50:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0570fde3-83b2-4495-aa0e-5e6d4a4e209d", "eventTime": "2018-07-12T14:50:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e58304-1086-47f4-9d24-ce58c12b88bc", "record_id": "flaws_cloudtrail:0000048:e7e58304-1086-47f4-9d24-ce58c12b88bc", "row_index": 48, "timestamp": "2018-07-12T14:50:32Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e58304-1086-47f4-9d24-ce58c12b88bc", "eventTime": "2018-07-12T14:50:32Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41417-baac-4421-baf5-e0fb6aed9382", "record_id": "flaws_cloudtrail:0000049:41417-baac-4421-baf5-e0fb6aed9382", "row_index": 49, "timestamp": "2018-07-12T14:50:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41417-baac-4421-baf5-e0fb6aed9382", "eventTime": "2018-07-12T14:50:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21d42bb5-76da-46bd-8cc3-93964bc47f", "record_id": "flaws_cloudtrail:0000050:21d42bb5-76da-46bd-8cc3-93964bc47f", "row_index": 50, "timestamp": "2018-07-12T14:50:35Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA0MSK2NLHPF9ULEWP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21d42bb5-76da-46bd-8cc3-93964bc47f", "eventTime": "2018-07-12T14:50:35Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA0MSK2NLHPF9ULEWP", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:35Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "582d8007-ec9b-450f-b61c-88fe54a0953f", "record_id": "flaws_cloudtrail:0000051:582d8007-ec9b-450f-b61c-88fe54a0953f", "row_index": 51, "timestamp": "2018-07-12T14:50:36Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIADDZA9PP8GGY0YMPX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "582d8007-ec9b-450f-b61c-88fe54a0953f", "eventTime": "2018-07-12T14:50:36Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIADDZA9PP8GGY0YMPX", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:36Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c78b26b-9cfa-4fed-b64e-bbc354bb05b5", "record_id": "flaws_cloudtrail:0000052:5c78b26b-9cfa-4fed-b64e-bbc354bb05b5", "row_index": 52, "timestamp": "2018-07-12T14:50:37Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIALHBZP6O3E0X2CTA9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c78b26b-9cfa-4fed-b64e-bbc354bb05b5", "eventTime": "2018-07-12T14:50:37Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIALHBZP6O3E0X2CTA9", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:37Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844989cc-9c74-45b7-955b-688dce706f11", "record_id": "flaws_cloudtrail:0000053:844989cc-9c74-45b7-955b-688dce706f11", "row_index": 53, "timestamp": "2018-07-12T14:50:38Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAR9TLXTX3MVU3B1TH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844989cc-9c74-45b7-955b-688dce706f11", "eventTime": "2018-07-12T14:50:38Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAR9TLXTX3MVU3B1TH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:38Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b7392f5-43ed-4900-92cb-1bc208cda15e", "record_id": "flaws_cloudtrail:0000054:5b7392f5-43ed-4900-92cb-1bc208cda15e", "row_index": 54, "timestamp": "2018-07-12T14:50:39Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAIZO3AZ6V9S8SVUSS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b7392f5-43ed-4900-92cb-1bc208cda15e", "eventTime": "2018-07-12T14:50:39Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIZO3AZ6V9S8SVUSS", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:39Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b658cf4d-f390-491b-a4ab-da26ddbf6f70", "record_id": "flaws_cloudtrail:0000055:b658cf4d-f390-491b-a4ab-da26ddbf6f70", "row_index": 55, "timestamp": "2018-07-12T14:50:41Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA7OUKWSF53SXST4LJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b658cf4d-f390-491b-a4ab-da26ddbf6f70", "eventTime": "2018-07-12T14:50:41Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7OUKWSF53SXST4LJ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:41Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ee499982-dbca-4e14-80bb-6661e6fb6c47", "record_id": "flaws_cloudtrail:0000056:3ee499982-dbca-4e14-80bb-6661e6fb6c47", "row_index": 56, "timestamp": "2018-07-12T14:50:43Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAMM88YP8C7BJOMPEP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ee499982-dbca-4e14-80bb-6661e6fb6c47", "eventTime": "2018-07-12T14:50:43Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMM88YP8C7BJOMPEP", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:42Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b59ec00-6ccf-4d78-91a7-fa8469e3881d", "record_id": "flaws_cloudtrail:0000057:6b59ec00-6ccf-4d78-91a7-fa8469e3881d", "row_index": 57, "timestamp": "2018-07-12T14:50:44Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA7S5RNGJC6NSARG2I", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b59ec00-6ccf-4d78-91a7-fa8469e3881d", "eventTime": "2018-07-12T14:50:44Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7S5RNGJC6NSARG2I", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:44Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee90e9f8-e12a-49f9-80d3-0cbfe58ede1f", "record_id": "flaws_cloudtrail:0000058:ee90e9f8-e12a-49f9-80d3-0cbfe58ede1f", "row_index": 58, "timestamp": "2018-07-12T14:50:46Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA9OAQGOBN1HTNO1I4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee90e9f8-e12a-49f9-80d3-0cbfe58ede1f", "eventTime": "2018-07-12T14:50:46Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9OAQGOBN1HTNO1I4", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:46Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1ac3026-bb19-4622-ad8e-6936e04ce6b5", "record_id": "flaws_cloudtrail:0000059:e1ac3026-bb19-4622-ad8e-6936e04ce6b5", "row_index": 59, "timestamp": "2018-07-12T14:50:48Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAR749G8S5683U6JF0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1ac3026-bb19-4622-ad8e-6936e04ce6b5", "eventTime": "2018-07-12T14:50:48Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAR749G8S5683U6JF0", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6872f9f7-3470-4376-b4bc-4a9a7dad961d", "record_id": "flaws_cloudtrail:0000060:6872f9f7-3470-4376-b4bc-4a9a7dad961d", "row_index": 60, "timestamp": "2018-07-12T14:50:49Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIADZY8KI7AFEL6OWFI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6872f9f7-3470-4376-b4bc-4a9a7dad961d", "eventTime": "2018-07-12T14:50:49Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIADZY8KI7AFEL6OWFI", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:49Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2febcbe-930e-4901-ba34-88db6aef26a0", "record_id": "flaws_cloudtrail:0000061:b2febcbe-930e-4901-ba34-88db6aef26a0", "row_index": 61, "timestamp": "2018-07-12T14:50:50Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAW1O3YPSL6CF03X8Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2febcbe-930e-4901-ba34-88db6aef26a0", "eventTime": "2018-07-12T14:50:50Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAW1O3YPSL6CF03X8Q", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:50Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37747e-f091-40df-b293-cbaa1f2f4941", "record_id": "flaws_cloudtrail:0000062:37747e-f091-40df-b293-cbaa1f2f4941", "row_index": 62, "timestamp": "2018-07-12T14:50:51Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAPYYIIMED46T734X3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37747e-f091-40df-b293-cbaa1f2f4941", "eventTime": "2018-07-12T14:50:51Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAPYYIIMED46T734X3", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:51Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b707a85a-dfe6-4e1c-aec0-06c4051eea19", "record_id": "flaws_cloudtrail:0000063:b707a85a-dfe6-4e1c-aec0-06c4051eea19", "row_index": 63, "timestamp": "2018-07-12T14:50:53Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAKH110WN9U0YBYC8F", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b707a85a-dfe6-4e1c-aec0-06c4051eea19", "eventTime": "2018-07-12T14:50:53Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKH110WN9U0YBYC8F", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:53Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a3d402-1e1f-4973-94c6-37dff498894b", "record_id": "flaws_cloudtrail:0000064:e5a3d402-1e1f-4973-94c6-37dff498894b", "row_index": 64, "timestamp": "2018-07-12T14:50:54Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAUDF4OM8RNTY962JX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a3d402-1e1f-4973-94c6-37dff498894b", "eventTime": "2018-07-12T14:50:54Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAUDF4OM8RNTY962JX", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T14:50:54Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffe648157-71dc-4423-9bc4-d8ce035fa6f0", "record_id": "flaws_cloudtrail:0000065:ffe648157-71dc-4423-9bc4-d8ce035fa6f0", "row_index": 65, "timestamp": "2018-07-12T14:50:55Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffe648157-71dc-4423-9bc4-d8ce035fa6f0", "eventTime": "2018-07-12T14:50:55Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "690a94ab-f260-4be7-a1e5-c551d849d1e0", "record_id": "flaws_cloudtrail:0000066:690a94ab-f260-4be7-a1e5-c551d849d1e0", "row_index": 66, "timestamp": "2018-07-12T14:50:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "690a94ab-f260-4be7-a1e5-c551d849d1e0", "eventTime": "2018-07-12T14:50:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "952c2687-d890-4488-a7ba-f496aab879cb", "record_id": "flaws_cloudtrail:0000067:952c2687-d890-4488-a7ba-f496aab879cb", "row_index": 67, "timestamp": "2018-07-12T14:50:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "952c2687-d890-4488-a7ba-f496aab879cb", "eventTime": "2018-07-12T14:50:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ba5f281-553b-4a85-b425-809f6c450493b", "record_id": "flaws_cloudtrail:0000068:2ba5f281-553b-4a85-b425-809f6c450493b", "row_index": 68, "timestamp": "2018-07-12T14:50:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ba5f281-553b-4a85-b425-809f6c450493b", "eventTime": "2018-07-12T14:50:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbeb165-c7b6-47df-a40c-24962b255a8a", "record_id": "flaws_cloudtrail:0000069:ebbeb165-c7b6-47df-a40c-24962b255a8a", "row_index": 69, "timestamp": "2018-07-12T14:50:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbeb165-c7b6-47df-a40c-24962b255a8a", "eventTime": "2018-07-12T14:50:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8cb9d1b-99b5-4ece-b265-4387bc754ab6", "record_id": "flaws_cloudtrail:0000070:e8cb9d1b-99b5-4ece-b265-4387bc754ab6", "row_index": 70, "timestamp": "2018-07-12T14:51:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8cb9d1b-99b5-4ece-b265-4387bc754ab6", "eventTime": "2018-07-12T14:51:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6891e3b2-1664-45a4-a252-a296aa6b2921", "record_id": "flaws_cloudtrail:0000071:6891e3b2-1664-45a4-a252-a296aa6b2921", "row_index": 71, "timestamp": "2018-07-12T14:51:04Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6891e3b2-1664-45a4-a252-a296aa6b2921", "eventTime": "2018-07-12T14:51:04Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "defa8803-c072-47c2-a148-d718979da80e", "record_id": "flaws_cloudtrail:0000072:defa8803-c072-47c2-a148-d718979da80e", "row_index": 72, "timestamp": "2018-07-12T14:51:06Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "defa8803-c072-47c2-a148-d718979da80e", "eventTime": "2018-07-12T14:51:06Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56569c8-52ab-4890-bcf1-d485014e778eb", "record_id": "flaws_cloudtrail:0000073:56569c8-52ab-4890-bcf1-d485014e778eb", "row_index": 73, "timestamp": "2018-07-12T14:51:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56569c8-52ab-4890-bcf1-d485014e778eb", "eventTime": "2018-07-12T14:51:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a4820a-d68d-4e1d-be38-38c786db32f1", "record_id": "flaws_cloudtrail:0000074:99a4820a-d68d-4e1d-be38-38c786db32f1", "row_index": 74, "timestamp": "2018-07-12T14:51:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a4820a-d68d-4e1d-be38-38c786db32f1", "eventTime": "2018-07-12T14:51:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "470e0181-67a8-4917-b275-2920e211b5c3", "record_id": "flaws_cloudtrail:0000075:470e0181-67a8-4917-b275-2920e211b5c3", "row_index": 75, "timestamp": "2018-07-12T14:51:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "470e0181-67a8-4917-b275-2920e211b5c3", "eventTime": "2018-07-12T14:51:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708b111e-c80d-4ea5-926c-eb0ba132dbff", "record_id": "flaws_cloudtrail:0000076:708b111e-c80d-4ea5-926c-eb0ba132dbff", "row_index": 76, "timestamp": "2018-07-12T14:51:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708b111e-c80d-4ea5-926c-eb0ba132dbff", "eventTime": "2018-07-12T14:51:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b47804a-aa86-4993-a9c9-857431bc9c6", "record_id": "flaws_cloudtrail:0000077:b47804a-aa86-4993-a9c9-857431bc9c6", "row_index": 77, "timestamp": "2018-07-12T14:51:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b47804a-aa86-4993-a9c9-857431bc9c6", "eventTime": "2018-07-12T14:51:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb35ec86-2e74-4daa-9df0-668f0978d029", "record_id": "flaws_cloudtrail:0000078:eb35ec86-2e74-4daa-9df0-668f0978d029", "row_index": 78, "timestamp": "2018-07-12T14:51:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb35ec86-2e74-4daa-9df0-668f0978d029", "eventTime": "2018-07-12T14:51:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae23830-2ff9-44ce-9db0-7bb468bfa723", "record_id": "flaws_cloudtrail:0000079:ae23830-2ff9-44ce-9db0-7bb468bfa723", "row_index": 79, "timestamp": "2018-07-12T14:51:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae23830-2ff9-44ce-9db0-7bb468bfa723", "eventTime": "2018-07-12T14:51:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f55a9c78-3f59-48a9-869c-67b5c4b89296", "record_id": "flaws_cloudtrail:0000080:f55a9c78-3f59-48a9-869c-67b5c4b89296", "row_index": 80, "timestamp": "2018-07-12T14:51:24Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f55a9c78-3f59-48a9-869c-67b5c4b89296", "eventTime": "2018-07-12T14:51:24Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07449-1007-42be-ba35-c1ffc69406e9", "record_id": "flaws_cloudtrail:0000081:07449-1007-42be-ba35-c1ffc69406e9", "row_index": 81, "timestamp": "2018-07-12T14:51:25Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07449-1007-42be-ba35-c1ffc69406e9", "eventTime": "2018-07-12T14:51:25Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec565667a-9060-4e02-a810-01e9b689eb01", "record_id": "flaws_cloudtrail:0000082:ec565667a-9060-4e02-a810-01e9b689eb01", "row_index": 82, "timestamp": "2018-07-12T14:51:26Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec565667a-9060-4e02-a810-01e9b689eb01", "eventTime": "2018-07-12T14:51:26Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2b1b4c2-a14a-462f-ab43-5b36bb68ad8d", "record_id": "flaws_cloudtrail:0000083:e2b1b4c2-a14a-462f-ab43-5b36bb68ad8d", "row_index": 83, "timestamp": "2018-07-12T14:51:27Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2b1b4c2-a14a-462f-ab43-5b36bb68ad8d", "eventTime": "2018-07-12T14:51:27Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b435e1e-5fa3-4468-9535-bd64a274095a4", "record_id": "flaws_cloudtrail:0000084:9b435e1e-5fa3-4468-9535-bd64a274095a4", "row_index": 84, "timestamp": "2018-07-12T14:51:29Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b435e1e-5fa3-4468-9535-bd64a274095a4", "eventTime": "2018-07-12T14:51:29Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f995ee4-578f-4e36-8698-94ffb23526fd", "record_id": "flaws_cloudtrail:0000085:8f995ee4-578f-4e36-8698-94ffb23526fd", "row_index": 85, "timestamp": "2018-07-12T14:51:30Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f995ee4-578f-4e36-8698-94ffb23526fd", "eventTime": "2018-07-12T14:51:30Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cddfcd7-52ab-41b3-a366-d0c12da6be8f", "record_id": "flaws_cloudtrail:0000086:4cddfcd7-52ab-41b3-a366-d0c12da6be8f", "row_index": 86, "timestamp": "2018-07-12T14:51:32Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cddfcd7-52ab-41b3-a366-d0c12da6be8f", "eventTime": "2018-07-12T14:51:32Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "422169-2d9c-4ee5-ad2e-4a315ac927e0", "record_id": "flaws_cloudtrail:0000087:422169-2d9c-4ee5-ad2e-4a315ac927e0", "row_index": 87, "timestamp": "2018-07-12T14:51:33Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "422169-2d9c-4ee5-ad2e-4a315ac927e0", "eventTime": "2018-07-12T14:51:33Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95f0b4c7-6246-4d9c-9e23-ce1e2696a356", "record_id": "flaws_cloudtrail:0000088:95f0b4c7-6246-4d9c-9e23-ce1e2696a356", "row_index": 88, "timestamp": "2018-07-12T14:51:36Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95f0b4c7-6246-4d9c-9e23-ce1e2696a356", "eventTime": "2018-07-12T14:51:36Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a360899e9-a0b2-4064-a0df-6228a97145b0", "record_id": "flaws_cloudtrail:0000089:a360899e9-a0b2-4064-a0df-6228a97145b0", "row_index": 89, "timestamp": "2018-07-12T14:51:38Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a360899e9-a0b2-4064-a0df-6228a97145b0", "eventTime": "2018-07-12T14:51:38Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2c5156-8062-4c66-bc31-fbf88c4f238e", "record_id": "flaws_cloudtrail:0000090:2d2c5156-8062-4c66-bc31-fbf88c4f238e", "row_index": 90, "timestamp": "2018-07-12T14:51:39Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2c5156-8062-4c66-bc31-fbf88c4f238e", "eventTime": "2018-07-12T14:51:39Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75eed3ed-c912-432b-98ce-89862d2547b8", "record_id": "flaws_cloudtrail:0000091:75eed3ed-c912-432b-98ce-89862d2547b8", "row_index": 91, "timestamp": "2018-07-12T14:51:40Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75eed3ed-c912-432b-98ce-89862d2547b8", "eventTime": "2018-07-12T14:51:40Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9267af5a-8112-4690-8c16-e953722a65d6", "record_id": "flaws_cloudtrail:0000092:9267af5a-8112-4690-8c16-e953722a65d6", "row_index": 92, "timestamp": "2018-07-12T14:51:42Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9267af5a-8112-4690-8c16-e953722a65d6", "eventTime": "2018-07-12T14:51:42Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc59c4dd-c7d8-4a15-b1b1-aacfc8df5b41", "record_id": "flaws_cloudtrail:0000093:cc59c4dd-c7d8-4a15-b1b1-aacfc8df5b41", "row_index": 93, "timestamp": "2018-07-12T14:51:43Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc59c4dd-c7d8-4a15-b1b1-aacfc8df5b41", "eventTime": "2018-07-12T14:51:43Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef83c56d-35ce-4b95-9216-e3ec2d159f35", "record_id": "flaws_cloudtrail:0000094:ef83c56d-35ce-4b95-9216-e3ec2d159f35", "row_index": 94, "timestamp": "2018-07-12T14:51:45Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef83c56d-35ce-4b95-9216-e3ec2d159f35", "eventTime": "2018-07-12T14:51:45Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c03ed7-cf57-49f5-a491-efd8f7e84e74", "record_id": "flaws_cloudtrail:0000095:c8c03ed7-cf57-49f5-a491-efd8f7e84e74", "row_index": 95, "timestamp": "2018-07-12T14:51:46Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c03ed7-cf57-49f5-a491-efd8f7e84e74", "eventTime": "2018-07-12T14:51:46Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26f474ca-635b-4c49-88f0-0ae9a39786", "record_id": "flaws_cloudtrail:0000096:26f474ca-635b-4c49-88f0-0ae9a39786", "row_index": 96, "timestamp": "2018-07-12T14:51:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26f474ca-635b-4c49-88f0-0ae9a39786", "eventTime": "2018-07-12T14:51:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632d8434-ff06-490c-af39-0b00a48bb959", "record_id": "flaws_cloudtrail:0000097:632d8434-ff06-490c-af39-0b00a48bb959", "row_index": 97, "timestamp": "2018-07-12T14:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632d8434-ff06-490c-af39-0b00a48bb959", "eventTime": "2018-07-12T14:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a3d2474-7326-457d-88cd-2005003d822e", "record_id": "flaws_cloudtrail:0000098:4a3d2474-7326-457d-88cd-2005003d822e", "row_index": 98, "timestamp": "2018-07-12T14:51:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a3d2474-7326-457d-88cd-2005003d822e", "eventTime": "2018-07-12T14:51:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2603ed3d-e05b-4a60-aba1-eaa782c367076", "record_id": "flaws_cloudtrail:0000099:2603ed3d-e05b-4a60-aba1-eaa782c367076", "row_index": 99, "timestamp": "2018-07-12T14:51:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2603ed3d-e05b-4a60-aba1-eaa782c367076", "eventTime": "2018-07-12T14:51:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f64d3c03-1ec0-4a7c-9216-3c34eca7ee27", "record_id": "flaws_cloudtrail:0000100:f64d3c03-1ec0-4a7c-9216-3c34eca7ee27", "row_index": 100, "timestamp": "2018-07-12T14:51:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f64d3c03-1ec0-4a7c-9216-3c34eca7ee27", "eventTime": "2018-07-12T14:51:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e0c417-860f-4838-bb95-b865f26d40ed", "record_id": "flaws_cloudtrail:0000101:b0e0c417-860f-4838-bb95-b865f26d40ed", "row_index": 101, "timestamp": "2018-07-12T14:51:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e0c417-860f-4838-bb95-b865f26d40ed", "eventTime": "2018-07-12T14:51:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f12be8d-7419-4db8-b3f5-1a3eccd6e272", "record_id": "flaws_cloudtrail:0000102:2f12be8d-7419-4db8-b3f5-1a3eccd6e272", "row_index": 102, "timestamp": "2018-07-12T14:51:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f12be8d-7419-4db8-b3f5-1a3eccd6e272", "eventTime": "2018-07-12T14:51:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645717c3-ce0f-4fc9-9396-b4da94efed9a", "record_id": "flaws_cloudtrail:0000103:645717c3-ce0f-4fc9-9396-b4da94efed9a", "row_index": 103, "timestamp": "2018-07-12T14:51:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645717c3-ce0f-4fc9-9396-b4da94efed9a", "eventTime": "2018-07-12T14:51:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d2926e-c939-42bd-8e10-973a353f3513", "record_id": "flaws_cloudtrail:0000104:13d2926e-c939-42bd-8e10-973a353f3513", "row_index": 104, "timestamp": "2018-07-12T14:52:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d2926e-c939-42bd-8e10-973a353f3513", "eventTime": "2018-07-12T14:52:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82295-a0af-4eeb-abd2-2cef405a277c", "record_id": "flaws_cloudtrail:0000105:b82295-a0af-4eeb-abd2-2cef405a277c", "row_index": 105, "timestamp": "2018-07-12T14:52:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82295-a0af-4eeb-abd2-2cef405a277c", "eventTime": "2018-07-12T14:52:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b809fc1-b5ab-4709-8f2f-4fc1405dbfe5", "record_id": "flaws_cloudtrail:0000106:7b809fc1-b5ab-4709-8f2f-4fc1405dbfe5", "row_index": 106, "timestamp": "2018-07-12T14:52:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b809fc1-b5ab-4709-8f2f-4fc1405dbfe5", "eventTime": "2018-07-12T14:52:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05ef4f0a-d2e0-49d7-8d4b-4ffb5d0927cb", "record_id": "flaws_cloudtrail:0000107:05ef4f0a-d2e0-49d7-8d4b-4ffb5d0927cb", "row_index": 107, "timestamp": "2018-07-12T14:52:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05ef4f0a-d2e0-49d7-8d4b-4ffb5d0927cb", "eventTime": "2018-07-12T14:52:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3846d403-79ea-48ba-9aef-89267f3c2e02", "record_id": "flaws_cloudtrail:0000108:3846d403-79ea-48ba-9aef-89267f3c2e02", "row_index": 108, "timestamp": "2018-07-12T14:52:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3846d403-79ea-48ba-9aef-89267f3c2e02", "eventTime": "2018-07-12T14:52:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b121689f-8c38-45df-8be9-91de9e560c0f", "record_id": "flaws_cloudtrail:0000109:b121689f-8c38-45df-8be9-91de9e560c0f", "row_index": 109, "timestamp": "2018-07-12T14:52:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b121689f-8c38-45df-8be9-91de9e560c0f", "eventTime": "2018-07-12T14:52:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3f860b-72c5-48b2-8b27-124ff620eb59", "record_id": "flaws_cloudtrail:0000110:6d3f860b-72c5-48b2-8b27-124ff620eb59", "row_index": 110, "timestamp": "2018-07-12T14:52:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3f860b-72c5-48b2-8b27-124ff620eb59", "eventTime": "2018-07-12T14:52:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dcaed0b-4ddc-4554-9b01-178983b9db51", "record_id": "flaws_cloudtrail:0000111:9dcaed0b-4ddc-4554-9b01-178983b9db51", "row_index": 111, "timestamp": "2018-07-12T14:52:20Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dcaed0b-4ddc-4554-9b01-178983b9db51", "eventTime": "2018-07-12T14:52:20Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dec432e1-0728-48cb-9795-674e1aca28a1", "record_id": "flaws_cloudtrail:0000112:dec432e1-0728-48cb-9795-674e1aca28a1", "row_index": 112, "timestamp": "2018-07-12T14:52:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dec432e1-0728-48cb-9795-674e1aca28a1", "eventTime": "2018-07-12T14:52:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "779859b8-c20b-4d0c-a2eb-5bd7a3e165f9", "record_id": "flaws_cloudtrail:0000113:779859b8-c20b-4d0c-a2eb-5bd7a3e165f9", "row_index": 113, "timestamp": "2018-07-12T14:52:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "779859b8-c20b-4d0c-a2eb-5bd7a3e165f9", "eventTime": "2018-07-12T14:52:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1244feea-e14e-4864-8db6-d0c476c84db3", "record_id": "flaws_cloudtrail:0000114:1244feea-e14e-4864-8db6-d0c476c84db3", "row_index": 114, "timestamp": "2018-07-12T14:52:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1244feea-e14e-4864-8db6-d0c476c84db3", "eventTime": "2018-07-12T14:52:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97da39ce-4b40-4ecd-bcf5-c567b8d0272b", "record_id": "flaws_cloudtrail:0000115:97da39ce-4b40-4ecd-bcf5-c567b8d0272b", "row_index": 115, "timestamp": "2018-07-12T14:52:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97da39ce-4b40-4ecd-bcf5-c567b8d0272b", "eventTime": "2018-07-12T14:52:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0522a375-03d3-4983-a7f8-1dda607aa2b6", "record_id": "flaws_cloudtrail:0000116:0522a375-03d3-4983-a7f8-1dda607aa2b6", "row_index": 116, "timestamp": "2018-07-12T14:52:27Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0522a375-03d3-4983-a7f8-1dda607aa2b6", "eventTime": "2018-07-12T14:52:27Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf185006b-df1d-4297-815f-24615f473c15", "record_id": "flaws_cloudtrail:0000117:bf185006b-df1d-4297-815f-24615f473c15", "row_index": 117, "timestamp": "2018-07-12T14:52:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf185006b-df1d-4297-815f-24615f473c15", "eventTime": "2018-07-12T14:52:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e3d040-6533-466b-bf8e-3fdad9155b4b", "record_id": "flaws_cloudtrail:0000118:48e3d040-6533-466b-bf8e-3fdad9155b4b", "row_index": 118, "timestamp": "2018-07-12T14:52:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e3d040-6533-466b-bf8e-3fdad9155b4b", "eventTime": "2018-07-12T14:52:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2712de2c-84a7-40ee-acb0-ea5dfa94942", "record_id": "flaws_cloudtrail:0000119:2712de2c-84a7-40ee-acb0-ea5dfa94942", "row_index": 119, "timestamp": "2018-07-12T14:52:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2712de2c-84a7-40ee-acb0-ea5dfa94942", "eventTime": "2018-07-12T14:52:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07f16274-4385-4ac5-b9e1-d70043c875f", "record_id": "flaws_cloudtrail:0000120:07f16274-4385-4ac5-b9e1-d70043c875f", "row_index": 120, "timestamp": "2018-07-12T14:52:32Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07f16274-4385-4ac5-b9e1-d70043c875f", "eventTime": "2018-07-12T14:52:32Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389012b5f-62ce-4cc2-9393-370aa092956", "record_id": "flaws_cloudtrail:0000121:389012b5f-62ce-4cc2-9393-370aa092956", "row_index": 121, "timestamp": "2018-07-12T14:52:33Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389012b5f-62ce-4cc2-9393-370aa092956", "eventTime": "2018-07-12T14:52:33Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d59b49f-d878-427d-bd7d-e6dee86d69f9", "record_id": "flaws_cloudtrail:0000122:8d59b49f-d878-427d-bd7d-e6dee86d69f9", "row_index": 122, "timestamp": "2018-07-12T14:52:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d59b49f-d878-427d-bd7d-e6dee86d69f9", "eventTime": "2018-07-12T14:52:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fc18b8b-e8e3-4701-b848-dc51ddaefdef", "record_id": "flaws_cloudtrail:0000123:1fc18b8b-e8e3-4701-b848-dc51ddaefdef", "row_index": 123, "timestamp": "2018-07-12T14:52:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fc18b8b-e8e3-4701-b848-dc51ddaefdef", "eventTime": "2018-07-12T14:52:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9aa2f7-9dd1-4996-be23-f523789fe31dd", "record_id": "flaws_cloudtrail:0000124:8a9aa2f7-9dd1-4996-be23-f523789fe31dd", "row_index": 124, "timestamp": "2018-07-12T14:52:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9aa2f7-9dd1-4996-be23-f523789fe31dd", "eventTime": "2018-07-12T14:52:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b9b236f-4e68-4525-b767-2ed5fa3277ed", "record_id": "flaws_cloudtrail:0000125:5b9b236f-4e68-4525-b767-2ed5fa3277ed", "row_index": 125, "timestamp": "2018-07-12T14:52:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b9b236f-4e68-4525-b767-2ed5fa3277ed", "eventTime": "2018-07-12T14:52:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "237754f91-517c-4aee-a2e0-b585c3057bdf", "record_id": "flaws_cloudtrail:0000126:237754f91-517c-4aee-a2e0-b585c3057bdf", "row_index": 126, "timestamp": "2018-07-12T14:52:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "237754f91-517c-4aee-a2e0-b585c3057bdf", "eventTime": "2018-07-12T14:52:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ab0c48-4b3c-4a3d-a2c0-56b06d0178c4", "record_id": "flaws_cloudtrail:0000127:38ab0c48-4b3c-4a3d-a2c0-56b06d0178c4", "row_index": 127, "timestamp": "2018-07-12T14:52:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ab0c48-4b3c-4a3d-a2c0-56b06d0178c4", "eventTime": "2018-07-12T14:52:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d050c5aa-36f7-447a-8926-5ea58c05b1e1", "record_id": "flaws_cloudtrail:0000128:d050c5aa-36f7-447a-8926-5ea58c05b1e1", "row_index": 128, "timestamp": "2018-07-12T14:52:43Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d050c5aa-36f7-447a-8926-5ea58c05b1e1", "eventTime": "2018-07-12T14:52:43Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18fb4c16-129c-4e3f-b698-c6b900f8d9cc", "record_id": "flaws_cloudtrail:0000129:18fb4c16-129c-4e3f-b698-c6b900f8d9cc", "row_index": 129, "timestamp": "2018-07-12T14:52:44Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18fb4c16-129c-4e3f-b698-c6b900f8d9cc", "eventTime": "2018-07-12T14:52:44Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16257a08-7ec5-4c42-8832-eeb8b016915f", "record_id": "flaws_cloudtrail:0000130:16257a08-7ec5-4c42-8832-eeb8b016915f", "row_index": 130, "timestamp": "2018-07-12T14:52:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16257a08-7ec5-4c42-8832-eeb8b016915f", "eventTime": "2018-07-12T14:52:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7e564764-1e06-4318-b952-14fec90901cc", "record_id": "flaws_cloudtrail:0000131:f7e564764-1e06-4318-b952-14fec90901cc", "row_index": 131, "timestamp": "2018-07-12T14:52:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7e564764-1e06-4318-b952-14fec90901cc", "eventTime": "2018-07-12T14:52:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09811e90-1052-4d0a-9f18-c2cb917136", "record_id": "flaws_cloudtrail:0000132:09811e90-1052-4d0a-9f18-c2cb917136", "row_index": 132, "timestamp": "2018-07-12T14:52:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09811e90-1052-4d0a-9f18-c2cb917136", "eventTime": "2018-07-12T14:52:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7284cb8-4689-4989-ba35-4b8a53ef9fa9", "record_id": "flaws_cloudtrail:0000133:c7284cb8-4689-4989-ba35-4b8a53ef9fa9", "row_index": 133, "timestamp": "2018-07-12T14:52:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7284cb8-4689-4989-ba35-4b8a53ef9fa9", "eventTime": "2018-07-12T14:52:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc2a7b35-cae7-4a9c-99a4-1722ad879c98", "record_id": "flaws_cloudtrail:0000134:dc2a7b35-cae7-4a9c-99a4-1722ad879c98", "row_index": 134, "timestamp": "2018-07-12T14:52:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc2a7b35-cae7-4a9c-99a4-1722ad879c98", "eventTime": "2018-07-12T14:52:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdcb9a9f-e46f-4948-a9e7-ae09311a78", "record_id": "flaws_cloudtrail:0000135:fdcb9a9f-e46f-4948-a9e7-ae09311a78", "row_index": 135, "timestamp": "2018-07-12T14:52:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdcb9a9f-e46f-4948-a9e7-ae09311a78", "eventTime": "2018-07-12T14:52:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "297448d75-345a-4c53-b814-7fa8b6e32789", "record_id": "flaws_cloudtrail:0000136:297448d75-345a-4c53-b814-7fa8b6e32789", "row_index": 136, "timestamp": "2018-07-12T14:52:54Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "297448d75-345a-4c53-b814-7fa8b6e32789", "eventTime": "2018-07-12T14:52:54Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cc823173-8b10-49cb-9622-c26aea9d48fe", "record_id": "flaws_cloudtrail:0000137:8cc823173-8b10-49cb-9622-c26aea9d48fe", "row_index": 137, "timestamp": "2018-07-12T14:52:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cc823173-8b10-49cb-9622-c26aea9d48fe", "eventTime": "2018-07-12T14:52:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e861f1f5-69be-425f-b132-980c431cb2ed", "record_id": "flaws_cloudtrail:0000138:e861f1f5-69be-425f-b132-980c431cb2ed", "row_index": 138, "timestamp": "2018-07-12T14:52:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e861f1f5-69be-425f-b132-980c431cb2ed", "eventTime": "2018-07-12T14:52:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "971fb2c8-9dcb-4dab-8879-69ffa3c130cf", "record_id": "flaws_cloudtrail:0000139:971fb2c8-9dcb-4dab-8879-69ffa3c130cf", "row_index": 139, "timestamp": "2018-07-12T14:52:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "971fb2c8-9dcb-4dab-8879-69ffa3c130cf", "eventTime": "2018-07-12T14:52:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d25d2aeb-f763-42c6-9998-cd57991f0", "record_id": "flaws_cloudtrail:0000140:d25d2aeb-f763-42c6-9998-cd57991f0", "row_index": 140, "timestamp": "2018-07-12T14:52:59Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d25d2aeb-f763-42c6-9998-cd57991f0", "eventTime": "2018-07-12T14:52:59Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bc075661-b00c-4083-9b59-089b130625", "record_id": "flaws_cloudtrail:0000141:6bc075661-b00c-4083-9b59-089b130625", "row_index": 141, "timestamp": "2018-07-12T14:53:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bc075661-b00c-4083-9b59-089b130625", "eventTime": "2018-07-12T14:53:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598985f2-afe2-43e6-b0f2-062d7ddbf8e3", "record_id": "flaws_cloudtrail:0000142:598985f2-afe2-43e6-b0f2-062d7ddbf8e3", "row_index": 142, "timestamp": "2018-07-12T14:53:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598985f2-afe2-43e6-b0f2-062d7ddbf8e3", "eventTime": "2018-07-12T14:53:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8af861984-8178-4f0a-88f1-2f3c57d591b5", "record_id": "flaws_cloudtrail:0000143:8af861984-8178-4f0a-88f1-2f3c57d591b5", "row_index": 143, "timestamp": "2018-07-12T14:53:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8af861984-8178-4f0a-88f1-2f3c57d591b5", "eventTime": "2018-07-12T14:53:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fad1f40-38d9-4e7c-95ce-d03c8be1439f", "record_id": "flaws_cloudtrail:0000144:8fad1f40-38d9-4e7c-95ce-d03c8be1439f", "row_index": 144, "timestamp": "2018-07-12T14:53:05Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fad1f40-38d9-4e7c-95ce-d03c8be1439f", "eventTime": "2018-07-12T14:53:05Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff1a3f0-519d-418f-a8ed-fbe21fa0282c", "record_id": "flaws_cloudtrail:0000145:4ff1a3f0-519d-418f-a8ed-fbe21fa0282c", "row_index": 145, "timestamp": "2018-07-12T14:53:06Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff1a3f0-519d-418f-a8ed-fbe21fa0282c", "eventTime": "2018-07-12T14:53:06Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b62e177-3e50-4521-8785-298c41cc4582", "record_id": "flaws_cloudtrail:0000146:9b62e177-3e50-4521-8785-298c41cc4582", "row_index": 146, "timestamp": "2018-07-12T14:53:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b62e177-3e50-4521-8785-298c41cc4582", "eventTime": "2018-07-12T14:53:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cfcafb0-b69b-4b91-acc6-4f1a4870d01b", "record_id": "flaws_cloudtrail:0000147:2cfcafb0-b69b-4b91-acc6-4f1a4870d01b", "row_index": 147, "timestamp": "2018-07-12T14:53:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cfcafb0-b69b-4b91-acc6-4f1a4870d01b", "eventTime": "2018-07-12T14:53:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3f74d2f-cf81-45ea-a52a-dde773e1cda4", "record_id": "flaws_cloudtrail:0000148:c3f74d2f-cf81-45ea-a52a-dde773e1cda4", "row_index": 148, "timestamp": "2018-07-12T14:53:10Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3f74d2f-cf81-45ea-a52a-dde773e1cda4", "eventTime": "2018-07-12T14:53:10Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cffdf34e-9691-478a-ae2c-444c96b2340c", "record_id": "flaws_cloudtrail:0000149:cffdf34e-9691-478a-ae2c-444c96b2340c", "row_index": 149, "timestamp": "2018-07-12T14:53:11Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cffdf34e-9691-478a-ae2c-444c96b2340c", "eventTime": "2018-07-12T14:53:11Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d8dfb7a-20f0-4f66-9059-6e55f214abe8", "record_id": "flaws_cloudtrail:0000150:4d8dfb7a-20f0-4f66-9059-6e55f214abe8", "row_index": 150, "timestamp": "2018-07-12T14:53:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d8dfb7a-20f0-4f66-9059-6e55f214abe8", "eventTime": "2018-07-12T14:53:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b8e22f-1b0f-467c-bfce-7a5788d252c1", "record_id": "flaws_cloudtrail:0000151:d7b8e22f-1b0f-467c-bfce-7a5788d252c1", "row_index": 151, "timestamp": "2018-07-12T14:53:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b8e22f-1b0f-467c-bfce-7a5788d252c1", "eventTime": "2018-07-12T14:53:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8538edf-6abf-463f-9459-5be12223ab8", "record_id": "flaws_cloudtrail:0000152:e8538edf-6abf-463f-9459-5be12223ab8", "row_index": 152, "timestamp": "2018-07-12T14:53:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8538edf-6abf-463f-9459-5be12223ab8", "eventTime": "2018-07-12T14:53:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "413fdc37-79d0-41ca-a87f-edd356b35df3", "record_id": "flaws_cloudtrail:0000153:413fdc37-79d0-41ca-a87f-edd356b35df3", "row_index": 153, "timestamp": "2018-07-12T14:53:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "413fdc37-79d0-41ca-a87f-edd356b35df3", "eventTime": "2018-07-12T14:53:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ee02e8c-cdfe-4ab4-9ef1-3ca9b0e07a45", "record_id": "flaws_cloudtrail:0000154:5ee02e8c-cdfe-4ab4-9ef1-3ca9b0e07a45", "row_index": 154, "timestamp": "2018-07-12T14:53:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ee02e8c-cdfe-4ab4-9ef1-3ca9b0e07a45", "eventTime": "2018-07-12T14:53:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cbe8a89-4457-4734-b17f-3ca512952334", "record_id": "flaws_cloudtrail:0000155:7cbe8a89-4457-4734-b17f-3ca512952334", "row_index": 155, "timestamp": "2018-07-12T14:53:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cbe8a89-4457-4734-b17f-3ca512952334", "eventTime": "2018-07-12T14:53:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dfa5041-f50b-4a04-91b4-ee212c3f6de4", "record_id": "flaws_cloudtrail:0000156:1dfa5041-f50b-4a04-91b4-ee212c3f6de4", "row_index": 156, "timestamp": "2018-07-12T14:53:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dfa5041-f50b-4a04-91b4-ee212c3f6de4", "eventTime": "2018-07-12T14:53:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd17dcb7-3491-4844-bfce-932c6bc88b50", "record_id": "flaws_cloudtrail:0000157:dd17dcb7-3491-4844-bfce-932c6bc88b50", "row_index": 157, "timestamp": "2018-07-12T14:53:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd17dcb7-3491-4844-bfce-932c6bc88b50", "eventTime": "2018-07-12T14:53:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "270903d-fbe5-4675-a00e-e575f22fdad8", "record_id": "flaws_cloudtrail:0000158:270903d-fbe5-4675-a00e-e575f22fdad8", "row_index": 158, "timestamp": "2018-07-12T14:53:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "270903d-fbe5-4675-a00e-e575f22fdad8", "eventTime": "2018-07-12T14:53:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8dceeae-f407-4317-9b6c-9002adcc1204", "record_id": "flaws_cloudtrail:0000159:b8dceeae-f407-4317-9b6c-9002adcc1204", "row_index": 159, "timestamp": "2018-07-12T14:53:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8dceeae-f407-4317-9b6c-9002adcc1204", "eventTime": "2018-07-12T14:53:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b893980f1-c4ac-47e6-8013-73923bb2518c", "record_id": "flaws_cloudtrail:0000160:b893980f1-c4ac-47e6-8013-73923bb2518c", "row_index": 160, "timestamp": "2018-07-12T14:53:27Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b893980f1-c4ac-47e6-8013-73923bb2518c", "eventTime": "2018-07-12T14:53:27Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c55adee-9a7e-407a-ab38-51788fb34", "record_id": "flaws_cloudtrail:0000161:1c55adee-9a7e-407a-ab38-51788fb34", "row_index": 161, "timestamp": "2018-07-12T14:53:29Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c55adee-9a7e-407a-ab38-51788fb34", "eventTime": "2018-07-12T14:53:29Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bbd32c9-8bec-4ff9-bce8-3d77ef4297df", "record_id": "flaws_cloudtrail:0000162:5bbd32c9-8bec-4ff9-bce8-3d77ef4297df", "row_index": 162, "timestamp": "2018-07-12T14:53:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bbd32c9-8bec-4ff9-bce8-3d77ef4297df", "eventTime": "2018-07-12T14:53:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdbced62-5965-4143-9cb4-5ec22f7de14d", "record_id": "flaws_cloudtrail:0000163:bdbced62-5965-4143-9cb4-5ec22f7de14d", "row_index": 163, "timestamp": "2018-07-12T14:53:32Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdbced62-5965-4143-9cb4-5ec22f7de14d", "eventTime": "2018-07-12T14:53:32Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49c789b1-5429-41c2-aa0e-495f96d84092", "record_id": "flaws_cloudtrail:0000164:49c789b1-5429-41c2-aa0e-495f96d84092", "row_index": 164, "timestamp": "2018-07-12T14:53:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49c789b1-5429-41c2-aa0e-495f96d84092", "eventTime": "2018-07-12T14:53:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d2367a-8a6e-4974-8079-385da9f19a00", "record_id": "flaws_cloudtrail:0000165:c3d2367a-8a6e-4974-8079-385da9f19a00", "row_index": 165, "timestamp": "2018-07-12T14:53:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d2367a-8a6e-4974-8079-385da9f19a00", "eventTime": "2018-07-12T14:53:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29d28d86-4a97-46d6-b137-19cd54ad192a", "record_id": "flaws_cloudtrail:0000166:29d28d86-4a97-46d6-b137-19cd54ad192a", "row_index": 166, "timestamp": "2018-07-12T14:53:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29d28d86-4a97-46d6-b137-19cd54ad192a", "eventTime": "2018-07-12T14:53:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddaf9dea-4691-4b02-a841-592a7accee2f", "record_id": "flaws_cloudtrail:0000167:ddaf9dea-4691-4b02-a841-592a7accee2f", "row_index": 167, "timestamp": "2018-07-12T14:53:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddaf9dea-4691-4b02-a841-592a7accee2f", "eventTime": "2018-07-12T14:53:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01acda9a-9eee-4876-8200-156358c3ed017", "record_id": "flaws_cloudtrail:0000168:01acda9a-9eee-4876-8200-156358c3ed017", "row_index": 168, "timestamp": "2018-07-12T14:53:40Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01acda9a-9eee-4876-8200-156358c3ed017", "eventTime": "2018-07-12T14:53:40Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4af7ee02-b26c-4f03-baf9-d7e28fef4c12", "record_id": "flaws_cloudtrail:0000169:4af7ee02-b26c-4f03-baf9-d7e28fef4c12", "row_index": 169, "timestamp": "2018-07-12T14:53:41Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4af7ee02-b26c-4f03-baf9-d7e28fef4c12", "eventTime": "2018-07-12T14:53:41Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f874f20b-1856-4ba3-8ea9-61dc08ed3e1a", "record_id": "flaws_cloudtrail:0000170:f874f20b-1856-4ba3-8ea9-61dc08ed3e1a", "row_index": 170, "timestamp": "2018-07-12T14:53:43Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f874f20b-1856-4ba3-8ea9-61dc08ed3e1a", "eventTime": "2018-07-12T14:53:43Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed0c77af-8da1-40f5-a280-6d720f123aa6", "record_id": "flaws_cloudtrail:0000171:ed0c77af-8da1-40f5-a280-6d720f123aa6", "row_index": 171, "timestamp": "2018-07-12T14:53:44Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed0c77af-8da1-40f5-a280-6d720f123aa6", "eventTime": "2018-07-12T14:53:44Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1de22aba-4b33-4cc3-82cd-d035d7f6006b", "record_id": "flaws_cloudtrail:0000172:1de22aba-4b33-4cc3-82cd-d035d7f6006b", "row_index": 172, "timestamp": "2018-07-12T14:53:45Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1de22aba-4b33-4cc3-82cd-d035d7f6006b", "eventTime": "2018-07-12T14:53:45Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f86bf53-7b23-4525-88c2-743e4c950a63", "record_id": "flaws_cloudtrail:0000173:1f86bf53-7b23-4525-88c2-743e4c950a63", "row_index": 173, "timestamp": "2018-07-12T14:53:45Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f86bf53-7b23-4525-88c2-743e4c950a63", "eventTime": "2018-07-12T14:53:45Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a598d7-f83a-47a0-9498-f64b69b3e713", "record_id": "flaws_cloudtrail:0000174:a1a598d7-f83a-47a0-9498-f64b69b3e713", "row_index": 174, "timestamp": "2018-07-12T14:53:46Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a598d7-f83a-47a0-9498-f64b69b3e713", "eventTime": "2018-07-12T14:53:46Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c17ab935-9570-4bdb-958c-82445f7db2d8", "record_id": "flaws_cloudtrail:0000175:c17ab935-9570-4bdb-958c-82445f7db2d8", "row_index": 175, "timestamp": "2018-07-12T14:53:47Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c17ab935-9570-4bdb-958c-82445f7db2d8", "eventTime": "2018-07-12T14:53:47Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44c860279-160a-451d-8208-14a6c0a3fe7e", "record_id": "flaws_cloudtrail:0000176:44c860279-160a-451d-8208-14a6c0a3fe7e", "row_index": 176, "timestamp": "2018-07-12T14:53:48Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44c860279-160a-451d-8208-14a6c0a3fe7e", "eventTime": "2018-07-12T14:53:48Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279845da-8ec6-4ab9-b1b8-30bc7be5f550", "record_id": "flaws_cloudtrail:0000177:279845da-8ec6-4ab9-b1b8-30bc7be5f550", "row_index": 177, "timestamp": "2018-07-12T14:53:49Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279845da-8ec6-4ab9-b1b8-30bc7be5f550", "eventTime": "2018-07-12T14:53:49Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b7740d9-9073-450d-8ab3-17e273d51b19", "record_id": "flaws_cloudtrail:0000178:0b7740d9-9073-450d-8ab3-17e273d51b19", "row_index": 178, "timestamp": "2018-07-12T14:53:50Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b7740d9-9073-450d-8ab3-17e273d51b19", "eventTime": "2018-07-12T14:53:50Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "501fbce3-5f3e-494b-bf54-9aa1f55e0578", "record_id": "flaws_cloudtrail:0000179:501fbce3-5f3e-494b-bf54-9aa1f55e0578", "row_index": 179, "timestamp": "2018-07-12T14:53:52Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "501fbce3-5f3e-494b-bf54-9aa1f55e0578", "eventTime": "2018-07-12T14:53:52Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "034592ad8-def7-4b75-ac42-166d860ea9c1", "record_id": "flaws_cloudtrail:0000180:034592ad8-def7-4b75-ac42-166d860ea9c1", "row_index": 180, "timestamp": "2018-07-12T14:53:54Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "034592ad8-def7-4b75-ac42-166d860ea9c1", "eventTime": "2018-07-12T14:53:54Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c75fa1a5-7f20-4ad9-9551-b5c59f679230b", "record_id": "flaws_cloudtrail:0000181:c75fa1a5-7f20-4ad9-9551-b5c59f679230b", "row_index": 181, "timestamp": "2018-07-12T14:53:55Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c75fa1a5-7f20-4ad9-9551-b5c59f679230b", "eventTime": "2018-07-12T14:53:55Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06497e-8ad2-453f-80b4-77badeaae769", "record_id": "flaws_cloudtrail:0000182:06497e-8ad2-453f-80b4-77badeaae769", "row_index": 182, "timestamp": "2018-07-12T14:53:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06497e-8ad2-453f-80b4-77badeaae769", "eventTime": "2018-07-12T14:53:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea8ae85f-798c-4180-9a25-3ad23159db8", "record_id": "flaws_cloudtrail:0000183:ea8ae85f-798c-4180-9a25-3ad23159db8", "row_index": 183, "timestamp": "2018-07-12T14:53:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea8ae85f-798c-4180-9a25-3ad23159db8", "eventTime": "2018-07-12T14:53:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beca2ffb-0ed4-44cc-ba26-84156a027a11", "record_id": "flaws_cloudtrail:0000184:beca2ffb-0ed4-44cc-ba26-84156a027a11", "row_index": 184, "timestamp": "2018-07-12T14:54:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beca2ffb-0ed4-44cc-ba26-84156a027a11", "eventTime": "2018-07-12T14:54:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff97d0f1-16c9-400d-b5cb-5d07f1188c70", "record_id": "flaws_cloudtrail:0000185:ff97d0f1-16c9-400d-b5cb-5d07f1188c70", "row_index": 185, "timestamp": "2018-07-12T14:54:01Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff97d0f1-16c9-400d-b5cb-5d07f1188c70", "eventTime": "2018-07-12T14:54:01Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f885ff1e-c8fe-4993-a6fb-fd973548aaf0", "record_id": "flaws_cloudtrail:0000186:f885ff1e-c8fe-4993-a6fb-fd973548aaf0", "row_index": 186, "timestamp": "2018-07-12T14:54:03Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f885ff1e-c8fe-4993-a6fb-fd973548aaf0", "eventTime": "2018-07-12T14:54:03Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb830e50-f40f-4c60-9925-11fa65d347a3", "record_id": "flaws_cloudtrail:0000187:bb830e50-f40f-4c60-9925-11fa65d347a3", "row_index": 187, "timestamp": "2018-07-12T14:54:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb830e50-f40f-4c60-9925-11fa65d347a3", "eventTime": "2018-07-12T14:54:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eb6f501-0991-42e8-a67b-457f14063d33", "record_id": "flaws_cloudtrail:0000188:9eb6f501-0991-42e8-a67b-457f14063d33", "row_index": 188, "timestamp": "2018-07-12T14:54:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eb6f501-0991-42e8-a67b-457f14063d33", "eventTime": "2018-07-12T14:54:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d0512ff-8b28-42c4-8924-4650d454c2ec", "record_id": "flaws_cloudtrail:0000189:0d0512ff-8b28-42c4-8924-4650d454c2ec", "row_index": 189, "timestamp": "2018-07-12T14:54:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d0512ff-8b28-42c4-8924-4650d454c2ec", "eventTime": "2018-07-12T14:54:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75c3a685-8652-44cc-bc6a-1010c5169f70", "record_id": "flaws_cloudtrail:0000190:75c3a685-8652-44cc-bc6a-1010c5169f70", "row_index": 190, "timestamp": "2018-07-12T14:54:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75c3a685-8652-44cc-bc6a-1010c5169f70", "eventTime": "2018-07-12T14:54:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "312ef49a-9761-42d6-b7fe-e272ff0c1ca5", "record_id": "flaws_cloudtrail:0000191:312ef49a-9761-42d6-b7fe-e272ff0c1ca5", "row_index": 191, "timestamp": "2018-07-12T14:54:10Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "312ef49a-9761-42d6-b7fe-e272ff0c1ca5", "eventTime": "2018-07-12T14:54:10Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855d8fe5-af44-4650-9807-4b8b1f7f24b9", "record_id": "flaws_cloudtrail:0000192:855d8fe5-af44-4650-9807-4b8b1f7f24b9", "row_index": 192, "timestamp": "2018-07-12T14:54:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855d8fe5-af44-4650-9807-4b8b1f7f24b9", "eventTime": "2018-07-12T14:54:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4a972bf-0a74-401f-a6b1-e00647cead", "record_id": "flaws_cloudtrail:0000193:e4a972bf-0a74-401f-a6b1-e00647cead", "row_index": 193, "timestamp": "2018-07-12T14:54:13Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4a972bf-0a74-401f-a6b1-e00647cead", "eventTime": "2018-07-12T14:54:13Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a46be497-247f-4c07-993b-54c17394c193", "record_id": "flaws_cloudtrail:0000194:a46be497-247f-4c07-993b-54c17394c193", "row_index": 194, "timestamp": "2018-07-12T14:54:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a46be497-247f-4c07-993b-54c17394c193", "eventTime": "2018-07-12T14:54:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e0f646-f2f2-4267-895e-ed6cd0046b4d", "record_id": "flaws_cloudtrail:0000195:64e0f646-f2f2-4267-895e-ed6cd0046b4d", "row_index": 195, "timestamp": "2018-07-12T14:54:15Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e0f646-f2f2-4267-895e-ed6cd0046b4d", "eventTime": "2018-07-12T14:54:15Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5082ce9-8261-4e55-a727-d6f5c5dd2967", "record_id": "flaws_cloudtrail:0000196:d5082ce9-8261-4e55-a727-d6f5c5dd2967", "row_index": 196, "timestamp": "2018-07-12T14:54:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5082ce9-8261-4e55-a727-d6f5c5dd2967", "eventTime": "2018-07-12T14:54:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da5c9d8-81e1-4ec4-8712-5253e8da104e", "record_id": "flaws_cloudtrail:0000197:2da5c9d8-81e1-4ec4-8712-5253e8da104e", "row_index": 197, "timestamp": "2018-07-12T14:54:18Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da5c9d8-81e1-4ec4-8712-5253e8da104e", "eventTime": "2018-07-12T14:54:18Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629452ee4-472d-4a7d-ac0a-c75e38f157b9", "record_id": "flaws_cloudtrail:0000198:629452ee4-472d-4a7d-ac0a-c75e38f157b9", "row_index": 198, "timestamp": "2018-07-12T14:54:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629452ee4-472d-4a7d-ac0a-c75e38f157b9", "eventTime": "2018-07-12T14:54:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36f54e8c-4aff-4d26-9a56-c6915ad7b713", "record_id": "flaws_cloudtrail:0000199:36f54e8c-4aff-4d26-9a56-c6915ad7b713", "row_index": 199, "timestamp": "2018-07-12T14:54:21Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36f54e8c-4aff-4d26-9a56-c6915ad7b713", "eventTime": "2018-07-12T14:54:21Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74d58f3-6e64-4c6a-86e1-38114f4211", "record_id": "flaws_cloudtrail:0000200:b74d58f3-6e64-4c6a-86e1-38114f4211", "row_index": 200, "timestamp": "2018-07-12T14:54:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74d58f3-6e64-4c6a-86e1-38114f4211", "eventTime": "2018-07-12T14:54:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25be491-7f61-4bc2-a526-2a5d091073", "record_id": "flaws_cloudtrail:0000201:f25be491-7f61-4bc2-a526-2a5d091073", "row_index": 201, "timestamp": "2018-07-12T14:54:24Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25be491-7f61-4bc2-a526-2a5d091073", "eventTime": "2018-07-12T14:54:24Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c96983-6c76-45f1-bb33-efc6cb40b2a3", "record_id": "flaws_cloudtrail:0000202:c96983-6c76-45f1-bb33-efc6cb40b2a3", "row_index": 202, "timestamp": "2018-07-12T14:54:25Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c96983-6c76-45f1-bb33-efc6cb40b2a3", "eventTime": "2018-07-12T14:54:25Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f714206d-7f06-4b84-9dbe-e4e9178a73ff", "record_id": "flaws_cloudtrail:0000203:3f714206d-7f06-4b84-9dbe-e4e9178a73ff", "row_index": 203, "timestamp": "2018-07-12T14:54:26Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f714206d-7f06-4b84-9dbe-e4e9178a73ff", "eventTime": "2018-07-12T14:54:26Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9db7803-eed8-4174-bc19-e0fe21769b86", "record_id": "flaws_cloudtrail:0000204:d9db7803-eed8-4174-bc19-e0fe21769b86", "row_index": 204, "timestamp": "2018-07-12T14:54:27Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9db7803-eed8-4174-bc19-e0fe21769b86", "eventTime": "2018-07-12T14:54:27Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a036954-975f-4c1a-986c-0bf5234613d0", "record_id": "flaws_cloudtrail:0000205:a036954-975f-4c1a-986c-0bf5234613d0", "row_index": 205, "timestamp": "2018-07-12T14:54:28Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a036954-975f-4c1a-986c-0bf5234613d0", "eventTime": "2018-07-12T14:54:28Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f58e9ed9-1984-4318-8b5c-38900815a670", "record_id": "flaws_cloudtrail:0000206:f58e9ed9-1984-4318-8b5c-38900815a670", "row_index": 206, "timestamp": "2018-07-12T14:54:30Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f58e9ed9-1984-4318-8b5c-38900815a670", "eventTime": "2018-07-12T14:54:30Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4209fac7-ab5e-4b50-82ff-7d278e7179da", "record_id": "flaws_cloudtrail:0000207:4209fac7-ab5e-4b50-82ff-7d278e7179da", "row_index": 207, "timestamp": "2018-07-12T14:54:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4209fac7-ab5e-4b50-82ff-7d278e7179da", "eventTime": "2018-07-12T14:54:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOSLC4TCEW68JU26A", "expiration": "Jul 12, 2018 8:59:41 PM", "sessionToken": "FQoDYXdzEEgaDECwumaHKR3SVAiXVCK3A3VPMdd2OHSiqWAdQhOxovYyqsJzNvhNfd+jgBhCsT5p2aGYxWVj5uJOyAZzKmL5tf7w9rP9Xbpe8Pc2DvBKyOUig1rZwCJ7bhOPfW/A7YoFfsraSQlwgDsDhIIHSEmMlB78Ba69/HYQMV1+EZUqO/xyqqx4VGjwEB9TetP9aeQ5bfxU9eBXsK2z61YocsqxFLWAeU9jn9UhygL+70KbTnNGKELegg5yzpqI3rrZ3m9N/7oVIx5CNcfLTvTUWVjh4jA685AGdgwMbFMrx0jj/RnbV8xe/4C/ALk0VsoAZWEGyf6GpZXNw/XeECQAmJuHJ2Mc7kxnmMOaHWUWISafCzBr4TGAsLJOaZETyLQXuWZV9q0/CQ9wiOuSINjYRNFbBXuvtBI/d0Oya3R7B9PqvC2qy0Tgh3qKoDT0B7eL1/FNwD8X9Awa4Ps/keQFCWvGj2/NEc44mSUuQprDz41ajYNdho8tDHSbT5JTOzkqWdIvDlgudRt8A5HqlCyF7L3ZZCb3EZk8X8lZ5VRm0MD0cXeHZRH+aT0U/MofwZKP07tlG5mcmVupRwXX77FdJl3Apa8mApGTUvUopted2gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea024f1-1775-41e8-92b4-2314e8b68b21", "record_id": "flaws_cloudtrail:0000208:cea024f1-1775-41e8-92b4-2314e8b68b21", "row_index": 208, "timestamp": "2018-07-12T14:54:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea024f1-1775-41e8-92b4-2314e8b68b21", "eventTime": "2018-07-12T14:54:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e063651d-bd84-41c4-afe8-663c4d95d530", "record_id": "flaws_cloudtrail:0000209:e063651d-bd84-41c4-afe8-663c4d95d530", "row_index": 209, "timestamp": "2018-07-12T14:54:33Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e063651d-bd84-41c4-afe8-663c4d95d530", "eventTime": "2018-07-12T14:54:33Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ff6bdd0-c708-4e45-9dee-365e22a2d11b", "record_id": "flaws_cloudtrail:0000210:3ff6bdd0-c708-4e45-9dee-365e22a2d11b", "row_index": 210, "timestamp": "2018-07-12T14:54:35Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ff6bdd0-c708-4e45-9dee-365e22a2d11b", "eventTime": "2018-07-12T14:54:35Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb5db39-2003-49bc-972f-e1edaaa8c214", "record_id": "flaws_cloudtrail:0000211:1eb5db39-2003-49bc-972f-e1edaaa8c214", "row_index": 211, "timestamp": "2018-07-12T14:54:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb5db39-2003-49bc-972f-e1edaaa8c214", "eventTime": "2018-07-12T14:54:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a6cce60-69ff-4abe-b451-983800c4ca", "record_id": "flaws_cloudtrail:0000212:2a6cce60-69ff-4abe-b451-983800c4ca", "row_index": 212, "timestamp": "2018-07-12T14:54:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a6cce60-69ff-4abe-b451-983800c4ca", "eventTime": "2018-07-12T14:54:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc8508e3-048c-4158-9fe1-8b5c8e8edfe5", "record_id": "flaws_cloudtrail:0000213:bc8508e3-048c-4158-9fe1-8b5c8e8edfe5", "row_index": 213, "timestamp": "2018-07-12T14:54:40Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc8508e3-048c-4158-9fe1-8b5c8e8edfe5", "eventTime": "2018-07-12T14:54:40Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28977-1078-4b51-8f00-ffcde10523f2", "record_id": "flaws_cloudtrail:0000214:28977-1078-4b51-8f00-ffcde10523f2", "row_index": 214, "timestamp": "2018-07-12T14:54:41Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28977-1078-4b51-8f00-ffcde10523f2", "eventTime": "2018-07-12T14:54:41Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f93f418-a07e-441b-a564-dd07cde46e9e", "record_id": "flaws_cloudtrail:0000215:6f93f418-a07e-441b-a564-dd07cde46e9e", "row_index": 215, "timestamp": "2018-07-12T14:54:45Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f93f418-a07e-441b-a564-dd07cde46e9e", "eventTime": "2018-07-12T14:54:45Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfee201f-3b86-4e08-999c-2782ec76248b", "record_id": "flaws_cloudtrail:0000216:bfee201f-3b86-4e08-999c-2782ec76248b", "row_index": 216, "timestamp": "2018-07-12T14:54:46Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfee201f-3b86-4e08-999c-2782ec76248b", "eventTime": "2018-07-12T14:54:46Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db173947-df90-4222-92ac-065f3f5041ac", "record_id": "flaws_cloudtrail:0000217:db173947-df90-4222-92ac-065f3f5041ac", "row_index": 217, "timestamp": "2018-07-12T14:54:48Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db173947-df90-4222-92ac-065f3f5041ac", "eventTime": "2018-07-12T14:54:48Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba5ab748-465a-49c6-aa77-7a8f321331c82", "record_id": "flaws_cloudtrail:0000218:ba5ab748-465a-49c6-aa77-7a8f321331c82", "row_index": 218, "timestamp": "2018-07-12T14:54:49Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba5ab748-465a-49c6-aa77-7a8f321331c82", "eventTime": "2018-07-12T14:54:49Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61df8d9d-9dc3-4d90-bc25-dc041caf6468", "record_id": "flaws_cloudtrail:0000219:61df8d9d-9dc3-4d90-bc25-dc041caf6468", "row_index": 219, "timestamp": "2018-07-12T14:54:50Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61df8d9d-9dc3-4d90-bc25-dc041caf6468", "eventTime": "2018-07-12T14:54:50Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68419ac1-939e-4301-a453-e83460e6a2a", "record_id": "flaws_cloudtrail:0000220:68419ac1-939e-4301-a453-e83460e6a2a", "row_index": 220, "timestamp": "2018-07-12T14:54:50Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68419ac1-939e-4301-a453-e83460e6a2a", "eventTime": "2018-07-12T14:54:50Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ea722b-07e6-45b5-8477-2b2f288cf2d4", "record_id": "flaws_cloudtrail:0000221:b1ea722b-07e6-45b5-8477-2b2f288cf2d4", "row_index": 221, "timestamp": "2018-07-12T14:54:51Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ea722b-07e6-45b5-8477-2b2f288cf2d4", "eventTime": "2018-07-12T14:54:51Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23eeddd7-48c5-49f9-9ddf-0112ead5d0b9", "record_id": "flaws_cloudtrail:0000222:23eeddd7-48c5-49f9-9ddf-0112ead5d0b9", "row_index": 222, "timestamp": "2018-07-12T14:54:53Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23eeddd7-48c5-49f9-9ddf-0112ead5d0b9", "eventTime": "2018-07-12T14:54:53Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58d4d192-d4ba-41cb-a864-f00e91c01316", "record_id": "flaws_cloudtrail:0000223:58d4d192-d4ba-41cb-a864-f00e91c01316", "row_index": 223, "timestamp": "2018-07-12T14:54:54Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58d4d192-d4ba-41cb-a864-f00e91c01316", "eventTime": "2018-07-12T14:54:54Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d6e42b-6938-4cfc-a518-1630f7d030da", "record_id": "flaws_cloudtrail:0000224:90d6e42b-6938-4cfc-a518-1630f7d030da", "row_index": 224, "timestamp": "2018-07-12T14:54:56Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d6e42b-6938-4cfc-a518-1630f7d030da", "eventTime": "2018-07-12T14:54:56Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb88eedf-4f52-4ea3-9d48-72a69edca14d", "record_id": "flaws_cloudtrail:0000225:eb88eedf-4f52-4ea3-9d48-72a69edca14d", "row_index": 225, "timestamp": "2018-07-12T14:54:57Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb88eedf-4f52-4ea3-9d48-72a69edca14d", "eventTime": "2018-07-12T14:54:57Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0abec4-0b18-4670-839b-6ee5df17ceb6", "record_id": "flaws_cloudtrail:0000226:ef0abec4-0b18-4670-839b-6ee5df17ceb6", "row_index": 226, "timestamp": "2018-07-12T14:55:00Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0abec4-0b18-4670-839b-6ee5df17ceb6", "eventTime": "2018-07-12T14:55:00Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09e432f4-9e7a-4a05-80dd-3ce5e9473740", "record_id": "flaws_cloudtrail:0000227:09e432f4-9e7a-4a05-80dd-3ce5e9473740", "row_index": 227, "timestamp": "2018-07-12T14:55:02Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09e432f4-9e7a-4a05-80dd-3ce5e9473740", "eventTime": "2018-07-12T14:55:02Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04de7fc2-0164-4cbe-8520-6cb055f5309e", "record_id": "flaws_cloudtrail:0000228:04de7fc2-0164-4cbe-8520-6cb055f5309e", "row_index": 228, "timestamp": "2018-07-12T14:55:03Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04de7fc2-0164-4cbe-8520-6cb055f5309e", "eventTime": "2018-07-12T14:55:03Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abbc25ee-ad21-4b9a-99cc-f4a209806a59", "record_id": "flaws_cloudtrail:0000229:abbc25ee-ad21-4b9a-99cc-f4a209806a59", "row_index": 229, "timestamp": "2018-07-12T14:55:04Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abbc25ee-ad21-4b9a-99cc-f4a209806a59", "eventTime": "2018-07-12T14:55:04Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c65e3ef3-a422-4985-a35c-79480f76e1d4", "record_id": "flaws_cloudtrail:0000230:c65e3ef3-a422-4985-a35c-79480f76e1d4", "row_index": 230, "timestamp": "2018-07-12T14:55:05Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c65e3ef3-a422-4985-a35c-79480f76e1d4", "eventTime": "2018-07-12T14:55:05Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b25d868b-3c39-4f13-89ab-ad77fc329d17", "record_id": "flaws_cloudtrail:0000231:b25d868b-3c39-4f13-89ab-ad77fc329d17", "row_index": 231, "timestamp": "2018-07-12T14:55:06Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b25d868b-3c39-4f13-89ab-ad77fc329d17", "eventTime": "2018-07-12T14:55:06Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c32e2884-ba04-469b-9558-7b12fff0362b", "record_id": "flaws_cloudtrail:0000232:c32e2884-ba04-469b-9558-7b12fff0362b", "row_index": 232, "timestamp": "2018-07-12T14:55:07Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c32e2884-ba04-469b-9558-7b12fff0362b", "eventTime": "2018-07-12T14:55:07Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc34aa66-6dff-4782-9ea1-d215524aaa4", "record_id": "flaws_cloudtrail:0000233:fc34aa66-6dff-4782-9ea1-d215524aaa4", "row_index": 233, "timestamp": "2018-07-12T14:55:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc34aa66-6dff-4782-9ea1-d215524aaa4", "eventTime": "2018-07-12T14:55:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e03a2577-447a-453e-a0b6-f317db8a3332", "record_id": "flaws_cloudtrail:0000234:e03a2577-447a-453e-a0b6-f317db8a3332", "row_index": 234, "timestamp": "2018-07-12T14:55:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e03a2577-447a-453e-a0b6-f317db8a3332", "eventTime": "2018-07-12T14:55:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a3422c9-8e13-4990-84e7-d74d2ab1b125", "record_id": "flaws_cloudtrail:0000235:0a3422c9-8e13-4990-84e7-d74d2ab1b125", "row_index": 235, "timestamp": "2018-07-12T14:55:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a3422c9-8e13-4990-84e7-d74d2ab1b125", "eventTime": "2018-07-12T14:55:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cc79a0d-1d31-457a-a3fe-708d1c8ae1a4", "record_id": "flaws_cloudtrail:0000236:8cc79a0d-1d31-457a-a3fe-708d1c8ae1a4", "row_index": 236, "timestamp": "2018-07-12T14:55:11Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cc79a0d-1d31-457a-a3fe-708d1c8ae1a4", "eventTime": "2018-07-12T14:55:11Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ea2091-8362-489b-9d73-16dc6b28187", "record_id": "flaws_cloudtrail:0000237:c9ea2091-8362-489b-9d73-16dc6b28187", "row_index": 237, "timestamp": "2018-07-12T14:55:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ea2091-8362-489b-9d73-16dc6b28187", "eventTime": "2018-07-12T14:55:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f43fb7f2-29cb-4ab6-8729-fef3e58ded6e", "record_id": "flaws_cloudtrail:0000238:f43fb7f2-29cb-4ab6-8729-fef3e58ded6e", "row_index": 238, "timestamp": "2018-07-12T14:55:15Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f43fb7f2-29cb-4ab6-8729-fef3e58ded6e", "eventTime": "2018-07-12T14:55:15Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7e74f61-b105-4089-814e-922fb5a709b4", "record_id": "flaws_cloudtrail:0000239:b7e74f61-b105-4089-814e-922fb5a709b4", "row_index": 239, "timestamp": "2018-07-12T14:55:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7e74f61-b105-4089-814e-922fb5a709b4", "eventTime": "2018-07-12T14:55:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53b232d2-8685-434a-a0dc-db8a83609660", "record_id": "flaws_cloudtrail:0000240:53b232d2-8685-434a-a0dc-db8a83609660", "row_index": 240, "timestamp": "2018-07-12T14:55:17Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53b232d2-8685-434a-a0dc-db8a83609660", "eventTime": "2018-07-12T14:55:17Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60e8dbae-6bac-4a3d-b8ff-ff197c4e9fd4", "record_id": "flaws_cloudtrail:0000241:60e8dbae-6bac-4a3d-b8ff-ff197c4e9fd4", "row_index": 241, "timestamp": "2018-07-12T14:55:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60e8dbae-6bac-4a3d-b8ff-ff197c4e9fd4", "eventTime": "2018-07-12T14:55:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb85c62-0c8d-403d-b90c-2c5392f090af", "record_id": "flaws_cloudtrail:0000242:dcb85c62-0c8d-403d-b90c-2c5392f090af", "row_index": 242, "timestamp": "2018-07-12T14:55:25Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb85c62-0c8d-403d-b90c-2c5392f090af", "eventTime": "2018-07-12T14:55:25Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "912332e2-2456-41b7-83aa-c385c3bfc13b", "record_id": "flaws_cloudtrail:0000243:912332e2-2456-41b7-83aa-c385c3bfc13b", "row_index": 243, "timestamp": "2018-07-12T14:55:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "912332e2-2456-41b7-83aa-c385c3bfc13b", "eventTime": "2018-07-12T14:55:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daf303c5-0965-419b-b676-462866da731", "record_id": "flaws_cloudtrail:0000244:daf303c5-0965-419b-b676-462866da731", "row_index": 244, "timestamp": "2018-07-12T14:55:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daf303c5-0965-419b-b676-462866da731", "eventTime": "2018-07-12T14:55:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645316f49-1324-4149-b461-676e912a2ca7", "record_id": "flaws_cloudtrail:0000245:645316f49-1324-4149-b461-676e912a2ca7", "row_index": 245, "timestamp": "2018-07-12T14:55:29Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645316f49-1324-4149-b461-676e912a2ca7", "eventTime": "2018-07-12T14:55:29Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f72907-03b6-4565-8067-2fd4e59f1d07", "record_id": "flaws_cloudtrail:0000246:f72907-03b6-4565-8067-2fd4e59f1d07", "row_index": 246, "timestamp": "2018-07-12T14:55:30Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f72907-03b6-4565-8067-2fd4e59f1d07", "eventTime": "2018-07-12T14:55:30Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "824baa0b-0c22-4f1a-9a31-e4bde292a8ae", "record_id": "flaws_cloudtrail:0000247:824baa0b-0c22-4f1a-9a31-e4bde292a8ae", "row_index": 247, "timestamp": "2018-07-12T14:55:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "824baa0b-0c22-4f1a-9a31-e4bde292a8ae", "eventTime": "2018-07-12T14:55:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1587dbc-46fa-47cb-979d-7e702c614ca8", "record_id": "flaws_cloudtrail:0000248:f1587dbc-46fa-47cb-979d-7e702c614ca8", "row_index": 248, "timestamp": "2018-07-12T14:55:33Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1587dbc-46fa-47cb-979d-7e702c614ca8", "eventTime": "2018-07-12T14:55:33Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a7243f2-d667-4226-a29c-e990971a8ea4", "record_id": "flaws_cloudtrail:0000249:5a7243f2-d667-4226-a29c-e990971a8ea4", "row_index": 249, "timestamp": "2018-07-12T14:55:34Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a7243f2-d667-4226-a29c-e990971a8ea4", "eventTime": "2018-07-12T14:55:34Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f46b77-1f11-4743-9a9e-672bc20bf0d7", "record_id": "flaws_cloudtrail:0000250:83f46b77-1f11-4743-9a9e-672bc20bf0d7", "row_index": 250, "timestamp": "2018-07-12T14:55:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f46b77-1f11-4743-9a9e-672bc20bf0d7", "eventTime": "2018-07-12T14:55:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a706556-2b08-4c94-8d4c-48156ad2214d", "record_id": "flaws_cloudtrail:0000251:a706556-2b08-4c94-8d4c-48156ad2214d", "row_index": 251, "timestamp": "2018-07-12T14:55:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a706556-2b08-4c94-8d4c-48156ad2214d", "eventTime": "2018-07-12T14:55:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b378169-f7f7-4fa0-8479-8f19b2cc26ab", "record_id": "flaws_cloudtrail:0000252:09b378169-f7f7-4fa0-8479-8f19b2cc26ab", "row_index": 252, "timestamp": "2018-07-12T14:55:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b378169-f7f7-4fa0-8479-8f19b2cc26ab", "eventTime": "2018-07-12T14:55:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c74b0ef7-b60e-4a89-b7cd-83b0aeb54281", "record_id": "flaws_cloudtrail:0000253:c74b0ef7-b60e-4a89-b7cd-83b0aeb54281", "row_index": 253, "timestamp": "2018-07-12T14:55:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c74b0ef7-b60e-4a89-b7cd-83b0aeb54281", "eventTime": "2018-07-12T14:55:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fdcbea3-06c5-436f-a11f-4804a8889ece", "record_id": "flaws_cloudtrail:0000254:5fdcbea3-06c5-436f-a11f-4804a8889ece", "row_index": 254, "timestamp": "2018-07-12T14:55:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fdcbea3-06c5-436f-a11f-4804a8889ece", "eventTime": "2018-07-12T14:55:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5e416a9-bbc8-4ad7-98bb-b1861a2a8664", "record_id": "flaws_cloudtrail:0000255:c5e416a9-bbc8-4ad7-98bb-b1861a2a8664", "row_index": 255, "timestamp": "2018-07-12T14:55:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5e416a9-bbc8-4ad7-98bb-b1861a2a8664", "eventTime": "2018-07-12T14:55:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4bb124b-58e3-402e-8cc3-44017cac5b3d", "record_id": "flaws_cloudtrail:0000256:d4bb124b-58e3-402e-8cc3-44017cac5b3d", "row_index": 256, "timestamp": "2018-07-12T14:55:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4bb124b-58e3-402e-8cc3-44017cac5b3d", "eventTime": "2018-07-12T14:55:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098951a-2e4a-4b50-98ed-cddc784b5832", "record_id": "flaws_cloudtrail:0000257:098951a-2e4a-4b50-98ed-cddc784b5832", "row_index": 257, "timestamp": "2018-07-12T14:55:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098951a-2e4a-4b50-98ed-cddc784b5832", "eventTime": "2018-07-12T14:55:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871213-b1f0-43e5-8b01-26868d80b6", "record_id": "flaws_cloudtrail:0000258:871213-b1f0-43e5-8b01-26868d80b6", "row_index": 258, "timestamp": "2018-07-12T14:55:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871213-b1f0-43e5-8b01-26868d80b6", "eventTime": "2018-07-12T14:55:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c394ba7-37b0-4120-9602-5992a7dd4d43", "record_id": "flaws_cloudtrail:0000259:0c394ba7-37b0-4120-9602-5992a7dd4d43", "row_index": 259, "timestamp": "2018-07-12T14:55:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c394ba7-37b0-4120-9602-5992a7dd4d43", "eventTime": "2018-07-12T14:55:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b5407f8-7124-4bb1-999e-a2418047df3e", "record_id": "flaws_cloudtrail:0000260:2b5407f8-7124-4bb1-999e-a2418047df3e", "row_index": 260, "timestamp": "2018-07-12T14:55:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b5407f8-7124-4bb1-999e-a2418047df3e", "eventTime": "2018-07-12T14:55:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54888d-38ba-42df-a634-1ed37fd1d822", "record_id": "flaws_cloudtrail:0000261:54888d-38ba-42df-a634-1ed37fd1d822", "row_index": 261, "timestamp": "2018-07-12T14:55:47Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54888d-38ba-42df-a634-1ed37fd1d822", "eventTime": "2018-07-12T14:55:47Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd0c3df-1b33-4a0d-8d4b-5507a805c68e", "record_id": "flaws_cloudtrail:0000262:0fd0c3df-1b33-4a0d-8d4b-5507a805c68e", "row_index": 262, "timestamp": "2018-07-12T14:55:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd0c3df-1b33-4a0d-8d4b-5507a805c68e", "eventTime": "2018-07-12T14:55:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c45b5211-5782-4194-8eda-c061dc3f8e1e", "record_id": "flaws_cloudtrail:0000263:c45b5211-5782-4194-8eda-c061dc3f8e1e", "row_index": 263, "timestamp": "2018-07-12T14:55:49Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c45b5211-5782-4194-8eda-c061dc3f8e1e", "eventTime": "2018-07-12T14:55:49Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8b296116-d73e-44a4-b617-00eee0ee7ffe", "record_id": "flaws_cloudtrail:0000264:e8b296116-d73e-44a4-b617-00eee0ee7ffe", "row_index": 264, "timestamp": "2018-07-12T14:56:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8b296116-d73e-44a4-b617-00eee0ee7ffe", "eventTime": "2018-07-12T14:56:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcfd4fb1-95a2-4b37-bae0-947b2222c1dc", "record_id": "flaws_cloudtrail:0000265:fcfd4fb1-95a2-4b37-bae0-947b2222c1dc", "row_index": 265, "timestamp": "2018-07-12T14:56:21Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcfd4fb1-95a2-4b37-bae0-947b2222c1dc", "eventTime": "2018-07-12T14:56:21Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33585b-3a18-40a5-94d5-b258108c4044", "record_id": "flaws_cloudtrail:0000266:33585b-3a18-40a5-94d5-b258108c4044", "row_index": 266, "timestamp": "2018-07-12T14:56:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33585b-3a18-40a5-94d5-b258108c4044", "eventTime": "2018-07-12T14:56:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be1e326-4c9f-4b0a-b383-42d0bef51c84", "record_id": "flaws_cloudtrail:0000267:8be1e326-4c9f-4b0a-b383-42d0bef51c84", "row_index": 267, "timestamp": "2018-07-12T14:56:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be1e326-4c9f-4b0a-b383-42d0bef51c84", "eventTime": "2018-07-12T14:56:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdfbac9c-d269-43df-8c66-305cb4db3d47", "record_id": "flaws_cloudtrail:0000268:bdfbac9c-d269-43df-8c66-305cb4db3d47", "row_index": 268, "timestamp": "2018-07-12T14:56:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdfbac9c-d269-43df-8c66-305cb4db3d47", "eventTime": "2018-07-12T14:56:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2293c29-50d4-40e9-883b-93996afa3408", "record_id": "flaws_cloudtrail:0000269:b2293c29-50d4-40e9-883b-93996afa3408", "row_index": 269, "timestamp": "2018-07-12T14:56:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2293c29-50d4-40e9-883b-93996afa3408", "eventTime": "2018-07-12T14:56:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9f639c0-e77b-41a3-87f1-92a4cb255c03", "record_id": "flaws_cloudtrail:0000270:d9f639c0-e77b-41a3-87f1-92a4cb255c03", "row_index": 270, "timestamp": "2018-07-12T14:56:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9f639c0-e77b-41a3-87f1-92a4cb255c03", "eventTime": "2018-07-12T14:56:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b840de6-587e-44f1-a25f-59ea63555938", "record_id": "flaws_cloudtrail:0000271:1b840de6-587e-44f1-a25f-59ea63555938", "row_index": 271, "timestamp": "2018-07-12T14:56:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b840de6-587e-44f1-a25f-59ea63555938", "eventTime": "2018-07-12T14:56:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "312161cfb-43b2-44c5-833f-2a5f084e91c4", "record_id": "flaws_cloudtrail:0000272:312161cfb-43b2-44c5-833f-2a5f084e91c4", "row_index": 272, "timestamp": "2018-07-12T14:56:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "312161cfb-43b2-44c5-833f-2a5f084e91c4", "eventTime": "2018-07-12T14:56:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fd4336c-f1d6-4d20-99da-6e3aafc43ad9", "record_id": "flaws_cloudtrail:0000273:3fd4336c-f1d6-4d20-99da-6e3aafc43ad9", "row_index": 273, "timestamp": "2018-07-12T14:56:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fd4336c-f1d6-4d20-99da-6e3aafc43ad9", "eventTime": "2018-07-12T14:56:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9045bf2b-40d7-462e-b72c-ef14021a4749", "record_id": "flaws_cloudtrail:0000274:9045bf2b-40d7-462e-b72c-ef14021a4749", "row_index": 274, "timestamp": "2018-07-12T14:56:33Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9045bf2b-40d7-462e-b72c-ef14021a4749", "eventTime": "2018-07-12T14:56:33Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b8adaec-160f-4288-93a3-e3d0b697e4a4", "record_id": "flaws_cloudtrail:0000275:6b8adaec-160f-4288-93a3-e3d0b697e4a4", "row_index": 275, "timestamp": "2018-07-12T14:56:34Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b8adaec-160f-4288-93a3-e3d0b697e4a4", "eventTime": "2018-07-12T14:56:34Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18824fc-155f-4b14-84d1-f402934ec0ec5", "record_id": "flaws_cloudtrail:0000276:18824fc-155f-4b14-84d1-f402934ec0ec5", "row_index": 276, "timestamp": "2018-07-12T14:56:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18824fc-155f-4b14-84d1-f402934ec0ec5", "eventTime": "2018-07-12T14:56:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7167b10d-ab3d-4917-86ef-ad351098b249", "record_id": "flaws_cloudtrail:0000277:7167b10d-ab3d-4917-86ef-ad351098b249", "row_index": 277, "timestamp": "2018-07-12T14:56:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7167b10d-ab3d-4917-86ef-ad351098b249", "eventTime": "2018-07-12T14:56:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7189bc46-d0d8-4b50-b6af-89a4faba2f7d", "record_id": "flaws_cloudtrail:0000278:7189bc46-d0d8-4b50-b6af-89a4faba2f7d", "row_index": 278, "timestamp": "2018-07-12T14:56:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7189bc46-d0d8-4b50-b6af-89a4faba2f7d", "eventTime": "2018-07-12T14:56:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fad2e54d-4336-42cd-8e07-7bea340044", "record_id": "flaws_cloudtrail:0000279:fad2e54d-4336-42cd-8e07-7bea340044", "row_index": 279, "timestamp": "2018-07-12T14:56:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fad2e54d-4336-42cd-8e07-7bea340044", "eventTime": "2018-07-12T14:56:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f22c88f2-ab20-4555-a344-7363e52eaac9", "record_id": "flaws_cloudtrail:0000280:f22c88f2-ab20-4555-a344-7363e52eaac9", "row_index": 280, "timestamp": "2018-07-12T14:56:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f22c88f2-ab20-4555-a344-7363e52eaac9", "eventTime": "2018-07-12T14:56:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "024bfa30-35a5-47f7-a184-95232fcee", "record_id": "flaws_cloudtrail:0000281:024bfa30-35a5-47f7-a184-95232fcee", "row_index": 281, "timestamp": "2018-07-12T14:56:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "024bfa30-35a5-47f7-a184-95232fcee", "eventTime": "2018-07-12T14:56:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "477a4c08-aae6-4a9b-b619-f865a95f733d", "record_id": "flaws_cloudtrail:0000282:477a4c08-aae6-4a9b-b619-f865a95f733d", "row_index": 282, "timestamp": "2018-07-12T14:56:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "477a4c08-aae6-4a9b-b619-f865a95f733d", "eventTime": "2018-07-12T14:56:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2725ac82-8229-4f77-83c0-13abeb367c0d", "record_id": "flaws_cloudtrail:0000283:2725ac82-8229-4f77-83c0-13abeb367c0d", "row_index": 283, "timestamp": "2018-07-12T14:56:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2725ac82-8229-4f77-83c0-13abeb367c0d", "eventTime": "2018-07-12T14:56:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cb9aab2-35e8-44e9-a4a4-3a2094c766b7", "record_id": "flaws_cloudtrail:0000284:0cb9aab2-35e8-44e9-a4a4-3a2094c766b7", "row_index": 284, "timestamp": "2018-07-12T14:56:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cb9aab2-35e8-44e9-a4a4-3a2094c766b7", "eventTime": "2018-07-12T14:56:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab14a77a-c4d2-4c9d-b240-e4c0e3efe457", "record_id": "flaws_cloudtrail:0000285:ab14a77a-c4d2-4c9d-b240-e4c0e3efe457", "row_index": 285, "timestamp": "2018-07-12T14:56:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab14a77a-c4d2-4c9d-b240-e4c0e3efe457", "eventTime": "2018-07-12T14:56:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f89fdd15-d55e-45fd-80d2-644600b4dd492", "record_id": "flaws_cloudtrail:0000286:f89fdd15-d55e-45fd-80d2-644600b4dd492", "row_index": 286, "timestamp": "2018-07-12T14:56:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f89fdd15-d55e-45fd-80d2-644600b4dd492", "eventTime": "2018-07-12T14:56:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d494ebb-9932-4f6e-8102-7fd8aae3439b", "record_id": "flaws_cloudtrail:0000287:5d494ebb-9932-4f6e-8102-7fd8aae3439b", "row_index": 287, "timestamp": "2018-07-12T14:56:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d494ebb-9932-4f6e-8102-7fd8aae3439b", "eventTime": "2018-07-12T14:56:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efe8c91c-b24e-49ef-8887-9a0b46c6b914", "record_id": "flaws_cloudtrail:0000288:efe8c91c-b24e-49ef-8887-9a0b46c6b914", "row_index": 288, "timestamp": "2018-07-12T14:56:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efe8c91c-b24e-49ef-8887-9a0b46c6b914", "eventTime": "2018-07-12T14:56:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44cfca34-3da9-4d9c-b1da-a08062df4701", "record_id": "flaws_cloudtrail:0000289:44cfca34-3da9-4d9c-b1da-a08062df4701", "row_index": 289, "timestamp": "2018-07-12T14:56:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44cfca34-3da9-4d9c-b1da-a08062df4701", "eventTime": "2018-07-12T14:56:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdd9395c-228d-4ced-87bb-a5e57bc306d5", "record_id": "flaws_cloudtrail:0000290:fdd9395c-228d-4ced-87bb-a5e57bc306d5", "row_index": 290, "timestamp": "2018-07-12T14:56:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdd9395c-228d-4ced-87bb-a5e57bc306d5", "eventTime": "2018-07-12T14:56:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b46ee58-5ff2-4488-90b9-1cac4873c179", "record_id": "flaws_cloudtrail:0000291:1b46ee58-5ff2-4488-90b9-1cac4873c179", "row_index": 291, "timestamp": "2018-07-12T14:56:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b46ee58-5ff2-4488-90b9-1cac4873c179", "eventTime": "2018-07-12T14:56:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd7d1030-5a3c-4080-b1b4-219f352a9658", "record_id": "flaws_cloudtrail:0000292:fd7d1030-5a3c-4080-b1b4-219f352a9658", "row_index": 292, "timestamp": "2018-07-12T14:57:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd7d1030-5a3c-4080-b1b4-219f352a9658", "eventTime": "2018-07-12T14:57:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6663b88-eff0-4005-82f6-edde34bddfc4", "record_id": "flaws_cloudtrail:0000293:f6663b88-eff0-4005-82f6-edde34bddfc4", "row_index": 293, "timestamp": "2018-07-12T14:57:02Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6663b88-eff0-4005-82f6-edde34bddfc4", "eventTime": "2018-07-12T14:57:02Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a261441cc-4c65-4721-90c1-a66ff3d3bd5c", "record_id": "flaws_cloudtrail:0000294:a261441cc-4c65-4721-90c1-a66ff3d3bd5c", "row_index": 294, "timestamp": "2018-07-12T14:57:03Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a261441cc-4c65-4721-90c1-a66ff3d3bd5c", "eventTime": "2018-07-12T14:57:03Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017423dad-1e07-48dd-9915-7c80cc229002", "record_id": "flaws_cloudtrail:0000295:017423dad-1e07-48dd-9915-7c80cc229002", "row_index": 295, "timestamp": "2018-07-12T14:57:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017423dad-1e07-48dd-9915-7c80cc229002", "eventTime": "2018-07-12T14:57:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a7de545-8688-4536-83f5-620e9eda5f6e", "record_id": "flaws_cloudtrail:0000296:2a7de545-8688-4536-83f5-620e9eda5f6e", "row_index": 296, "timestamp": "2018-07-12T14:57:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a7de545-8688-4536-83f5-620e9eda5f6e", "eventTime": "2018-07-12T14:57:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f5220f-6977-4dce-bcb1-7049b91c51e9", "record_id": "flaws_cloudtrail:0000297:47f5220f-6977-4dce-bcb1-7049b91c51e9", "row_index": 297, "timestamp": "2018-07-12T14:57:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f5220f-6977-4dce-bcb1-7049b91c51e9", "eventTime": "2018-07-12T14:57:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ed4c794-fddd-40e9-9048-73648a4d8c5f", "record_id": "flaws_cloudtrail:0000298:4ed4c794-fddd-40e9-9048-73648a4d8c5f", "row_index": 298, "timestamp": "2018-07-12T14:57:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ed4c794-fddd-40e9-9048-73648a4d8c5f", "eventTime": "2018-07-12T14:57:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87cde72a-59fa-4502-81f4-309a446c895f", "record_id": "flaws_cloudtrail:0000299:87cde72a-59fa-4502-81f4-309a446c895f", "row_index": 299, "timestamp": "2018-07-12T14:57:09Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87cde72a-59fa-4502-81f4-309a446c895f", "eventTime": "2018-07-12T14:57:09Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4f4096-af22-488a-9302-48c35dbaccc4", "record_id": "flaws_cloudtrail:0000300:ce4f4096-af22-488a-9302-48c35dbaccc4", "row_index": 300, "timestamp": "2018-07-12T14:57:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4f4096-af22-488a-9302-48c35dbaccc4", "eventTime": "2018-07-12T14:57:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4bb2f64-3254-425e-aa3d-118305e15793", "record_id": "flaws_cloudtrail:0000301:d4bb2f64-3254-425e-aa3d-118305e15793", "row_index": 301, "timestamp": "2018-07-12T14:57:39Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4bb2f64-3254-425e-aa3d-118305e15793", "eventTime": "2018-07-12T14:57:39Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64402bc-6276-4d71-b3df-45b4961d04c0", "record_id": "flaws_cloudtrail:0000302:64402bc-6276-4d71-b3df-45b4961d04c0", "row_index": 302, "timestamp": "2018-07-12T14:57:41Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64402bc-6276-4d71-b3df-45b4961d04c0", "eventTime": "2018-07-12T14:57:41Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8efab9d-3b56-4efc-b0b1-8dd20ee81e99", "record_id": "flaws_cloudtrail:0000303:b8efab9d-3b56-4efc-b0b1-8dd20ee81e99", "row_index": 303, "timestamp": "2018-07-12T14:57:42Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8efab9d-3b56-4efc-b0b1-8dd20ee81e99", "eventTime": "2018-07-12T14:57:42Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "587b19c9-a347-437c-8a1e-35522e796ab4", "record_id": "flaws_cloudtrail:0000304:587b19c9-a347-437c-8a1e-35522e796ab4", "row_index": 304, "timestamp": "2018-07-12T14:57:43Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "587b19c9-a347-437c-8a1e-35522e796ab4", "eventTime": "2018-07-12T14:57:43Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e076a144-f5ad-4c24-9bdc-6b142d74a322", "record_id": "flaws_cloudtrail:0000305:e076a144-f5ad-4c24-9bdc-6b142d74a322", "row_index": 305, "timestamp": "2018-07-12T14:57:45Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e076a144-f5ad-4c24-9bdc-6b142d74a322", "eventTime": "2018-07-12T14:57:45Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1cc6307-044f-429c-bbd3-c91dc09ac362", "record_id": "flaws_cloudtrail:0000306:f1cc6307-044f-429c-bbd3-c91dc09ac362", "row_index": 306, "timestamp": "2018-07-12T14:57:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1cc6307-044f-429c-bbd3-c91dc09ac362", "eventTime": "2018-07-12T14:57:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef396b14-2dae-4245-bd53-165826e949cc", "record_id": "flaws_cloudtrail:0000307:ef396b14-2dae-4245-bd53-165826e949cc", "row_index": 307, "timestamp": "2018-07-12T14:57:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef396b14-2dae-4245-bd53-165826e949cc", "eventTime": "2018-07-12T14:57:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bb849ff-82d4-4925-bd56-a0bd2b62ec9d", "record_id": "flaws_cloudtrail:0000308:0bb849ff-82d4-4925-bd56-a0bd2b62ec9d", "row_index": 308, "timestamp": "2018-07-12T14:57:49Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bb849ff-82d4-4925-bd56-a0bd2b62ec9d", "eventTime": "2018-07-12T14:57:49Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d92dd16-c129-4364-9c81-8e76e13e17a0", "record_id": "flaws_cloudtrail:0000309:6d92dd16-c129-4364-9c81-8e76e13e17a0", "row_index": 309, "timestamp": "2018-07-12T14:57:50Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d92dd16-c129-4364-9c81-8e76e13e17a0", "eventTime": "2018-07-12T14:57:50Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ap-south-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da824f8-25af-4da4-a9de-34260fee94d6", "record_id": "flaws_cloudtrail:0000310:3da824f8-25af-4da4-a9de-34260fee94d6", "row_index": 310, "timestamp": "2018-07-12T14:57:51Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da824f8-25af-4da4-a9de-34260fee94d6", "eventTime": "2018-07-12T14:57:51Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:eu-west-2:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ddbcca2-6c86-4daa-bcb4-8d2d2b7b7fb1", "record_id": "flaws_cloudtrail:0000311:2ddbcca2-6c86-4daa-bcb4-8d2d2b7b7fb1", "row_index": 311, "timestamp": "2018-07-12T14:57:51Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ddbcca2-6c86-4daa-bcb4-8d2d2b7b7fb1", "eventTime": "2018-07-12T14:57:51Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:eu-west-3:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98576def-0a3c-41af-93ad-f16c59eb0a07", "record_id": "flaws_cloudtrail:0000312:98576def-0a3c-41af-93ad-f16c59eb0a07", "row_index": 312, "timestamp": "2018-07-12T14:57:52Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98576def-0a3c-41af-93ad-f16c59eb0a07", "eventTime": "2018-07-12T14:57:52Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:eu-west-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fb93cfe-5fd2-4e7a-9e77-20f1d3ba5976", "record_id": "flaws_cloudtrail:0000313:2fb93cfe-5fd2-4e7a-9e77-20f1d3ba5976", "row_index": 313, "timestamp": "2018-07-12T14:57:53Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fb93cfe-5fd2-4e7a-9e77-20f1d3ba5976", "eventTime": "2018-07-12T14:57:53Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ap-northeast-2:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0394bde-478d-47a7-be0f-dcb6fecfe20c", "record_id": "flaws_cloudtrail:0000314:d0394bde-478d-47a7-be0f-dcb6fecfe20c", "row_index": 314, "timestamp": "2018-07-12T14:57:54Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0394bde-478d-47a7-be0f-dcb6fecfe20c", "eventTime": "2018-07-12T14:57:54Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ap-northeast-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84f2aa9b-ff00-4de4-8499-bbaeba8ab534", "record_id": "flaws_cloudtrail:0000315:84f2aa9b-ff00-4de4-8499-bbaeba8ab534", "row_index": 315, "timestamp": "2018-07-12T14:57:56Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84f2aa9b-ff00-4de4-8499-bbaeba8ab534", "eventTime": "2018-07-12T14:57:56Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:sa-east-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f39796-634f-4ec3-886c-25fdbd8b6a0a", "record_id": "flaws_cloudtrail:0000316:2f39796-634f-4ec3-886c-25fdbd8b6a0a", "row_index": 316, "timestamp": "2018-07-12T14:57:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f39796-634f-4ec3-886c-25fdbd8b6a0a", "eventTime": "2018-07-12T14:57:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ap-southeast-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86862d2-c0ae-441d-b38d-33657424911f", "record_id": "flaws_cloudtrail:0000317:86862d2-c0ae-441d-b38d-33657424911f", "row_index": 317, "timestamp": "2018-07-12T14:57:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86862d2-c0ae-441d-b38d-33657424911f", "eventTime": "2018-07-12T14:57:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ca-central-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75dc573c-373b-44c2-875c-a4348a396b6d", "record_id": "flaws_cloudtrail:0000318:75dc573c-373b-44c2-875c-a4348a396b6d", "row_index": 318, "timestamp": "2018-07-12T14:58:00Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75dc573c-373b-44c2-875c-a4348a396b6d", "eventTime": "2018-07-12T14:58:00Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ap-southeast-2:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9b5f343-7904-4232-8978-55bb960a909d", "record_id": "flaws_cloudtrail:0000319:f9b5f343-7904-4232-8978-55bb960a909d", "row_index": 319, "timestamp": "2018-07-12T14:58:01Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9b5f343-7904-4232-8978-55bb960a909d", "eventTime": "2018-07-12T14:58:01Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:eu-central-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49a0a098-52b3-4894-ab5d-a435b31c5f63", "record_id": "flaws_cloudtrail:0000320:49a0a098-52b3-4894-ab5d-a435b31c5f63", "row_index": 320, "timestamp": "2018-07-12T14:58:02Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49a0a098-52b3-4894-ab5d-a435b31c5f63", "eventTime": "2018-07-12T14:58:02Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:us-east-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9a68c5f-34fb-44cd-ac7a-8b06a0300404", "record_id": "flaws_cloudtrail:0000321:c9a68c5f-34fb-44cd-ac7a-8b06a0300404", "row_index": 321, "timestamp": "2018-07-12T14:58:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9a68c5f-34fb-44cd-ac7a-8b06a0300404", "eventTime": "2018-07-12T14:58:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:us-east-2:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca92f534-7c25-4af2-96e9-915e0a72883", "record_id": "flaws_cloudtrail:0000322:ca92f534-7c25-4af2-96e9-915e0a72883", "row_index": 322, "timestamp": "2018-07-12T14:58:06Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca92f534-7c25-4af2-96e9-915e0a72883", "eventTime": "2018-07-12T14:58:06Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:us-west-1:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d3716f-dfe2-4717-bbdd-bc2fd649f2e6", "record_id": "flaws_cloudtrail:0000323:d7d3716f-dfe2-4717-bbdd-bc2fd649f2e6", "row_index": 323, "timestamp": "2018-07-12T14:58:07Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d3716f-dfe2-4717-bbdd-bc2fd649f2e6", "eventTime": "2018-07-12T14:58:07Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:us-west-2:811596193553:detector/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a91221-37d7-4c80-9dba-a2500882b946", "record_id": "flaws_cloudtrail:0000324:a91221-37d7-4c80-9dba-a2500882b946", "row_index": 324, "timestamp": "2018-07-12T14:58:08Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a91221-37d7-4c80-9dba-a2500882b946", "eventTime": "2018-07-12T14:58:08Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2e0e94-2003-49c1-a276-2f6e65bd6e51", "record_id": "flaws_cloudtrail:0000325:ba2e0e94-2003-49c1-a276-2f6e65bd6e51", "row_index": 325, "timestamp": "2018-07-12T14:58:09Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2e0e94-2003-49c1-a276-2f6e65bd6e51", "eventTime": "2018-07-12T14:58:09Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed76c5c-a823-4b82-a328-1a7d8f615a06", "record_id": "flaws_cloudtrail:0000326:aed76c5c-a823-4b82-a328-1a7d8f615a06", "row_index": 326, "timestamp": "2018-07-12T14:58:10Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed76c5c-a823-4b82-a328-1a7d8f615a06", "eventTime": "2018-07-12T14:58:10Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f716a1fc-374c-4bef-ac7d-219f3a06811b", "record_id": "flaws_cloudtrail:0000327:f716a1fc-374c-4bef-ac7d-219f3a06811b", "row_index": 327, "timestamp": "2018-07-12T14:58:11Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f716a1fc-374c-4bef-ac7d-219f3a06811b", "eventTime": "2018-07-12T14:58:11Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c72dce3b-10ba-4c8f-8e1a-54376bc7415c", "record_id": "flaws_cloudtrail:0000328:c72dce3b-10ba-4c8f-8e1a-54376bc7415c", "row_index": 328, "timestamp": "2018-07-12T14:58:12Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c72dce3b-10ba-4c8f-8e1a-54376bc7415c", "eventTime": "2018-07-12T14:58:12Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e661a825-996e-4149-bf60-26c3d9cb011a", "record_id": "flaws_cloudtrail:0000329:e661a825-996e-4149-bf60-26c3d9cb011a", "row_index": 329, "timestamp": "2018-07-12T14:58:13Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e661a825-996e-4149-bf60-26c3d9cb011a", "eventTime": "2018-07-12T14:58:13Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95e51c5-d5ed-4dff-b598-2978b0e3c0b3", "record_id": "flaws_cloudtrail:0000330:c95e51c5-d5ed-4dff-b598-2978b0e3c0b3", "row_index": 330, "timestamp": "2018-07-12T14:58:14Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95e51c5-d5ed-4dff-b598-2978b0e3c0b3", "eventTime": "2018-07-12T14:58:14Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313ca37a-7672-4426-989f-8f2fed1ef707", "record_id": "flaws_cloudtrail:0000331:313ca37a-7672-4426-989f-8f2fed1ef707", "row_index": 331, "timestamp": "2018-07-12T14:58:15Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313ca37a-7672-4426-989f-8f2fed1ef707", "eventTime": "2018-07-12T14:58:15Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccdd7127-f2d3-482e-b67c-4929c6279b7c", "record_id": "flaws_cloudtrail:0000332:ccdd7127-f2d3-482e-b67c-4929c6279b7c", "row_index": 332, "timestamp": "2018-07-12T14:58:16Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccdd7127-f2d3-482e-b67c-4929c6279b7c", "eventTime": "2018-07-12T14:58:16Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "452f97da-24ac-4abb-9dd4-51d8bb8bcb00", "record_id": "flaws_cloudtrail:0000333:452f97da-24ac-4abb-9dd4-51d8bb8bcb00", "row_index": 333, "timestamp": "2018-07-12T14:58:17Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "452f97da-24ac-4abb-9dd4-51d8bb8bcb00", "eventTime": "2018-07-12T14:58:17Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eb5da71-243e-4e50-9561-ff42b0d696073", "record_id": "flaws_cloudtrail:0000334:6eb5da71-243e-4e50-9561-ff42b0d696073", "row_index": 334, "timestamp": "2018-07-12T14:58:18Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eb5da71-243e-4e50-9561-ff42b0d696073", "eventTime": "2018-07-12T14:58:18Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72a845ef-b1e7-48f5-a111-87b19290", "record_id": "flaws_cloudtrail:0000335:72a845ef-b1e7-48f5-a111-87b19290", "row_index": 335, "timestamp": "2018-07-12T14:58:19Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72a845ef-b1e7-48f5-a111-87b19290", "eventTime": "2018-07-12T14:58:19Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e622f1-ef25-46c9-a29c-50d2595b363f", "record_id": "flaws_cloudtrail:0000336:f4e622f1-ef25-46c9-a29c-50d2595b363f", "row_index": 336, "timestamp": "2018-07-12T14:58:21Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e622f1-ef25-46c9-a29c-50d2595b363f", "eventTime": "2018-07-12T14:58:21Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b096c77d-db2a-4a16-b9bc-5f6aea25ab34", "record_id": "flaws_cloudtrail:0000337:b096c77d-db2a-4a16-b9bc-5f6aea25ab34", "row_index": 337, "timestamp": "2018-07-12T14:58:22Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b096c77d-db2a-4a16-b9bc-5f6aea25ab34", "eventTime": "2018-07-12T14:58:22Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "babb0917-5dbf-4030-934c-f8a45d9647e2", "record_id": "flaws_cloudtrail:0000338:babb0917-5dbf-4030-934c-f8a45d9647e2", "row_index": 338, "timestamp": "2018-07-12T14:58:23Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "babb0917-5dbf-4030-934c-f8a45d9647e2", "eventTime": "2018-07-12T14:58:23Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade7c839-a0df-4b8e-85bc-92b628138225", "record_id": "flaws_cloudtrail:0000339:ade7c839-a0df-4b8e-85bc-92b628138225", "row_index": 339, "timestamp": "2018-07-12T14:58:24Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade7c839-a0df-4b8e-85bc-92b628138225", "eventTime": "2018-07-12T14:58:24Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e320f32f-8121-4118-8499-a89e222d41dd", "record_id": "flaws_cloudtrail:0000340:e320f32f-8121-4118-8499-a89e222d41dd", "row_index": 340, "timestamp": "2018-07-12T14:58:25Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e320f32f-8121-4118-8499-a89e222d41dd", "eventTime": "2018-07-12T14:58:25Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19aefb89-59a4-489f-832f-64fb2464a5aa", "record_id": "flaws_cloudtrail:0000341:19aefb89-59a4-489f-832f-64fb2464a5aa", "row_index": 341, "timestamp": "2018-07-12T14:58:26Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19aefb89-59a4-489f-832f-64fb2464a5aa", "eventTime": "2018-07-12T14:58:26Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea792396-debf-4c16-ab2d-3b069ad2afe8", "record_id": "flaws_cloudtrail:0000342:2ea792396-debf-4c16-ab2d-3b069ad2afe8", "row_index": 342, "timestamp": "2018-07-12T14:58:26Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea792396-debf-4c16-ab2d-3b069ad2afe8", "eventTime": "2018-07-12T14:58:26Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64d0d792-572e-4595-a0f4-161b19cfe345", "record_id": "flaws_cloudtrail:0000343:64d0d792-572e-4595-a0f4-161b19cfe345", "row_index": 343, "timestamp": "2018-07-12T14:58:28Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64d0d792-572e-4595-a0f4-161b19cfe345", "eventTime": "2018-07-12T14:58:28Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af0e2d1-fc8c-4ab1-9715-f163c7a65e9a", "record_id": "flaws_cloudtrail:0000344:5af0e2d1-fc8c-4ab1-9715-f163c7a65e9a", "row_index": 344, "timestamp": "2018-07-12T14:58:30Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af0e2d1-fc8c-4ab1-9715-f163c7a65e9a", "eventTime": "2018-07-12T14:58:30Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b2d1a87-3245-4192-89b2-73beced94a43", "record_id": "flaws_cloudtrail:0000345:2b2d1a87-3245-4192-89b2-73beced94a43", "row_index": 345, "timestamp": "2018-07-12T14:58:31Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b2d1a87-3245-4192-89b2-73beced94a43", "eventTime": "2018-07-12T14:58:31Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c518ce-647c-4201-86a9-76e766bd033f", "record_id": "flaws_cloudtrail:0000346:c1c518ce-647c-4201-86a9-76e766bd033f", "row_index": 346, "timestamp": "2018-07-12T14:58:32Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c518ce-647c-4201-86a9-76e766bd033f", "eventTime": "2018-07-12T14:58:32Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b4b91b6-6991-419b-86f0-e2b46f2cba8d", "record_id": "flaws_cloudtrail:0000347:8b4b91b6-6991-419b-86f0-e2b46f2cba8d", "row_index": 347, "timestamp": "2018-07-12T14:58:35Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b4b91b6-6991-419b-86f0-e2b46f2cba8d", "eventTime": "2018-07-12T14:58:35Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7b9ff40-902e-4889-9dfc-5578539920cf", "record_id": "flaws_cloudtrail:0000348:e7b9ff40-902e-4889-9dfc-5578539920cf", "row_index": 348, "timestamp": "2018-07-12T14:58:37Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7b9ff40-902e-4889-9dfc-5578539920cf", "eventTime": "2018-07-12T14:58:37Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666a138d-88cd-40ef-83e8-90ef620431f", "record_id": "flaws_cloudtrail:0000349:666a138d-88cd-40ef-83e8-90ef620431f", "row_index": 349, "timestamp": "2018-07-12T14:58:38Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666a138d-88cd-40ef-83e8-90ef620431f", "eventTime": "2018-07-12T14:58:38Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b57acb-483b-42c6-999d-1f12b95e4893", "record_id": "flaws_cloudtrail:0000350:d7b57acb-483b-42c6-999d-1f12b95e4893", "row_index": 350, "timestamp": "2018-07-12T14:58:39Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b57acb-483b-42c6-999d-1f12b95e4893", "eventTime": "2018-07-12T14:58:39Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32905ff-9fac-4ad5-ab0c-7f89221f5979", "record_id": "flaws_cloudtrail:0000351:32905ff-9fac-4ad5-ab0c-7f89221f5979", "row_index": 351, "timestamp": "2018-07-12T14:58:40Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32905ff-9fac-4ad5-ab0c-7f89221f5979", "eventTime": "2018-07-12T14:58:40Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9faee5a4-a09c-4638-8c6e-104ff748bde1", "record_id": "flaws_cloudtrail:0000352:9faee5a4-a09c-4638-8c6e-104ff748bde1", "row_index": 352, "timestamp": "2018-07-12T14:58:42Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9faee5a4-a09c-4638-8c6e-104ff748bde1", "eventTime": "2018-07-12T14:58:42Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86abca3f-7d09-459c-86bc-45900e61feef", "record_id": "flaws_cloudtrail:0000353:86abca3f-7d09-459c-86bc-45900e61feef", "row_index": 353, "timestamp": "2018-07-12T14:58:43Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86abca3f-7d09-459c-86bc-45900e61feef", "eventTime": "2018-07-12T14:58:43Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34796b-ebc3-4340-9c29-ac38cbaad4d3", "record_id": "flaws_cloudtrail:0000354:e34796b-ebc3-4340-9c29-ac38cbaad4d3", "row_index": 354, "timestamp": "2018-07-12T14:58:44Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34796b-ebc3-4340-9c29-ac38cbaad4d3", "eventTime": "2018-07-12T14:58:44Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1321eb59-e3cb-44e1-b38d-383f13c52da1", "record_id": "flaws_cloudtrail:0000355:1321eb59-e3cb-44e1-b38d-383f13c52da1", "row_index": 355, "timestamp": "2018-07-12T14:58:45Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1321eb59-e3cb-44e1-b38d-383f13c52da1", "eventTime": "2018-07-12T14:58:45Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411c41eb-3b3c-4b9a-8efc-50816ec07e57", "record_id": "flaws_cloudtrail:0000356:411c41eb-3b3c-4b9a-8efc-50816ec07e57", "row_index": 356, "timestamp": "2018-07-12T14:58:46Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411c41eb-3b3c-4b9a-8efc-50816ec07e57", "eventTime": "2018-07-12T14:58:46Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25d7811b-16ed-4359-ba46-865d208fe2b9", "record_id": "flaws_cloudtrail:0000357:25d7811b-16ed-4359-ba46-865d208fe2b9", "row_index": 357, "timestamp": "2018-07-12T14:58:47Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25d7811b-16ed-4359-ba46-865d208fe2b9", "eventTime": "2018-07-12T14:58:47Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b2245fa-ccb1-4ff2-ba5b-4da32a41a1b1", "record_id": "flaws_cloudtrail:0000358:4b2245fa-ccb1-4ff2-ba5b-4da32a41a1b1", "row_index": 358, "timestamp": "2018-07-12T14:58:48Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b2245fa-ccb1-4ff2-ba5b-4da32a41a1b1", "eventTime": "2018-07-12T14:58:48Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b130ce-ddf3-4c61-b961-ff3a608e73fa", "record_id": "flaws_cloudtrail:0000359:79b130ce-ddf3-4c61-b961-ff3a608e73fa", "row_index": 359, "timestamp": "2018-07-12T14:58:49Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b130ce-ddf3-4c61-b961-ff3a608e73fa", "eventTime": "2018-07-12T14:58:49Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf251a33-7224-4936-bba8-2e825f15cf47", "record_id": "flaws_cloudtrail:0000360:cf251a33-7224-4936-bba8-2e825f15cf47", "row_index": 360, "timestamp": "2018-07-12T14:58:51Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf251a33-7224-4936-bba8-2e825f15cf47", "eventTime": "2018-07-12T14:58:51Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c274b88-931e-43f6-9baa-822d3576ed70", "record_id": "flaws_cloudtrail:0000361:9c274b88-931e-43f6-9baa-822d3576ed70", "row_index": 361, "timestamp": "2018-07-12T14:58:52Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c274b88-931e-43f6-9baa-822d3576ed70", "eventTime": "2018-07-12T14:58:52Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3148fd58-7e04-4cfb-8a21-e3141f167103", "record_id": "flaws_cloudtrail:0000362:3148fd58-7e04-4cfb-8a21-e3141f167103", "row_index": 362, "timestamp": "2018-07-12T14:59:00Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3148fd58-7e04-4cfb-8a21-e3141f167103", "eventTime": "2018-07-12T14:59:00Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebf45ab-a857-4ebf-86f6-f4d49eb6825a", "record_id": "flaws_cloudtrail:0000363:8ebf45ab-a857-4ebf-86f6-f4d49eb6825a", "row_index": 363, "timestamp": "2018-07-12T14:59:02Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebf45ab-a857-4ebf-86f6-f4d49eb6825a", "eventTime": "2018-07-12T14:59:02Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19b4cf6a-097f-4bb7-a86b-01ba3ae15fb8", "record_id": "flaws_cloudtrail:0000364:19b4cf6a-097f-4bb7-a86b-01ba3ae15fb8", "row_index": 364, "timestamp": "2018-07-12T14:59:03Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19b4cf6a-097f-4bb7-a86b-01ba3ae15fb8", "eventTime": "2018-07-12T14:59:03Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b69c3607-8594-4a83-bf59-3dffec40c568", "record_id": "flaws_cloudtrail:0000365:b69c3607-8594-4a83-bf59-3dffec40c568", "row_index": 365, "timestamp": "2018-07-12T14:59:04Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b69c3607-8594-4a83-bf59-3dffec40c568", "eventTime": "2018-07-12T14:59:04Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be04b53b-16ad-4d89-90f9-164b2396fd5a", "record_id": "flaws_cloudtrail:0000366:be04b53b-16ad-4d89-90f9-164b2396fd5a", "row_index": 366, "timestamp": "2018-07-12T14:59:05Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be04b53b-16ad-4d89-90f9-164b2396fd5a", "eventTime": "2018-07-12T14:59:05Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8b10be-c21b-4456-97e7-f3128f5c5017", "record_id": "flaws_cloudtrail:0000367:ee8b10be-c21b-4456-97e7-f3128f5c5017", "row_index": 367, "timestamp": "2018-07-12T14:59:06Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8b10be-c21b-4456-97e7-f3128f5c5017", "eventTime": "2018-07-12T14:59:06Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccfad700-ff52-432e-9485-d2fe76b3f381", "record_id": "flaws_cloudtrail:0000368:ccfad700-ff52-432e-9485-d2fe76b3f381", "row_index": 368, "timestamp": "2018-07-12T14:59:07Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccfad700-ff52-432e-9485-d2fe76b3f381", "eventTime": "2018-07-12T14:59:07Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2921c9cd-9adf-4977-8659-ce355fa85bb5", "record_id": "flaws_cloudtrail:0000369:2921c9cd-9adf-4977-8659-ce355fa85bb5", "row_index": 369, "timestamp": "2018-07-12T14:59:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2921c9cd-9adf-4977-8659-ce355fa85bb5", "eventTime": "2018-07-12T14:59:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7be58cd-6198-4f53-81f6-b99f33fa290b", "record_id": "flaws_cloudtrail:0000370:d7be58cd-6198-4f53-81f6-b99f33fa290b", "row_index": 370, "timestamp": "2018-07-12T14:59:10Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7be58cd-6198-4f53-81f6-b99f33fa290b", "eventTime": "2018-07-12T14:59:10Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098099-5651-48e7-93af-3e03bf4376a6", "record_id": "flaws_cloudtrail:0000371:098099-5651-48e7-93af-3e03bf4376a6", "row_index": 371, "timestamp": "2018-07-12T14:59:11Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098099-5651-48e7-93af-3e03bf4376a6", "eventTime": "2018-07-12T14:59:11Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598c7c3a-df6e-4da2-986b-0c0d4c99f50c", "record_id": "flaws_cloudtrail:0000372:598c7c3a-df6e-4da2-986b-0c0d4c99f50c", "row_index": 372, "timestamp": "2018-07-12T14:59:11Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598c7c3a-df6e-4da2-986b-0c0d4c99f50c", "eventTime": "2018-07-12T14:59:11Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2b484f0-81d3-481e-ac55-4e6f49d04a49", "record_id": "flaws_cloudtrail:0000373:d2b484f0-81d3-481e-ac55-4e6f49d04a49", "row_index": 373, "timestamp": "2018-07-12T14:59:12Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2b484f0-81d3-481e-ac55-4e6f49d04a49", "eventTime": "2018-07-12T14:59:12Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1147d62-4bff-4e04-aeb8-5e4020c3e371", "record_id": "flaws_cloudtrail:0000374:f1147d62-4bff-4e04-aeb8-5e4020c3e371", "row_index": 374, "timestamp": "2018-07-12T14:59:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1147d62-4bff-4e04-aeb8-5e4020c3e371", "eventTime": "2018-07-12T14:59:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23975-b68d-45fe-aee0-69024e98adb", "record_id": "flaws_cloudtrail:0000375:23975-b68d-45fe-aee0-69024e98adb", "row_index": 375, "timestamp": "2018-07-12T14:59:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23975-b68d-45fe-aee0-69024e98adb", "eventTime": "2018-07-12T14:59:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c26f8c7-a513-4f3f-b184-e72777ef8b4", "record_id": "flaws_cloudtrail:0000376:0c26f8c7-a513-4f3f-b184-e72777ef8b4", "row_index": 376, "timestamp": "2018-07-12T14:59:14Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c26f8c7-a513-4f3f-b184-e72777ef8b4", "eventTime": "2018-07-12T14:59:14Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f860301-2ca4-4a78-bf7f-e06364a8d12c", "record_id": "flaws_cloudtrail:0000377:1f860301-2ca4-4a78-bf7f-e06364a8d12c", "row_index": 377, "timestamp": "2018-07-12T14:59:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f860301-2ca4-4a78-bf7f-e06364a8d12c", "eventTime": "2018-07-12T14:59:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f2fc2f6-4669-4c02-aa86-5b5d8f8f4c89", "record_id": "flaws_cloudtrail:0000378:1f2fc2f6-4669-4c02-aa86-5b5d8f8f4c89", "row_index": 378, "timestamp": "2018-07-12T14:59:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f2fc2f6-4669-4c02-aa86-5b5d8f8f4c89", "eventTime": "2018-07-12T14:59:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7553eeac-8a95-44ad-83d1-0bb072dcb23d", "record_id": "flaws_cloudtrail:0000379:7553eeac-8a95-44ad-83d1-0bb072dcb23d", "row_index": 379, "timestamp": "2018-07-12T14:59:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7553eeac-8a95-44ad-83d1-0bb072dcb23d", "eventTime": "2018-07-12T14:59:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69294cb-158d-4836-981e-e85e5cb26bdf", "record_id": "flaws_cloudtrail:0000380:69294cb-158d-4836-981e-e85e5cb26bdf", "row_index": 380, "timestamp": "2018-07-12T14:59:20Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69294cb-158d-4836-981e-e85e5cb26bdf", "eventTime": "2018-07-12T14:59:20Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d10f00-44fb-453a-88df-9fc1510d8737", "record_id": "flaws_cloudtrail:0000381:61d10f00-44fb-453a-88df-9fc1510d8737", "row_index": 381, "timestamp": "2018-07-12T14:59:21Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d10f00-44fb-453a-88df-9fc1510d8737", "eventTime": "2018-07-12T14:59:21Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae2f781e-e8d0-463b-b4e1-6c25e1fdf69a", "record_id": "flaws_cloudtrail:0000382:ae2f781e-e8d0-463b-b4e1-6c25e1fdf69a", "row_index": 382, "timestamp": "2018-07-12T14:59:23Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae2f781e-e8d0-463b-b4e1-6c25e1fdf69a", "eventTime": "2018-07-12T14:59:23Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361e52d5-9521-4fc1-b8d2-766553dbafb02", "record_id": "flaws_cloudtrail:0000383:361e52d5-9521-4fc1-b8d2-766553dbafb02", "row_index": 383, "timestamp": "2018-07-12T14:59:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361e52d5-9521-4fc1-b8d2-766553dbafb02", "eventTime": "2018-07-12T14:59:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70a166611-035e-46bc-beb4-2a2c120877a83", "record_id": "flaws_cloudtrail:0000384:70a166611-035e-46bc-beb4-2a2c120877a83", "row_index": 384, "timestamp": "2018-07-12T14:59:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70a166611-035e-46bc-beb4-2a2c120877a83", "eventTime": "2018-07-12T14:59:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea106118d-4eca-48a5-8b4b-e054d5d7a56f", "record_id": "flaws_cloudtrail:0000385:ea106118d-4eca-48a5-8b4b-e054d5d7a56f", "row_index": 385, "timestamp": "2018-07-12T14:59:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea106118d-4eca-48a5-8b4b-e054d5d7a56f", "eventTime": "2018-07-12T14:59:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3d1fa65-d83f-4f32-bbc6-19d3bf6bb57f", "record_id": "flaws_cloudtrail:0000386:a3d1fa65-d83f-4f32-bbc6-19d3bf6bb57f", "row_index": 386, "timestamp": "2018-07-12T14:59:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3d1fa65-d83f-4f32-bbc6-19d3bf6bb57f", "eventTime": "2018-07-12T14:59:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9a5e35e-3473-4cd7-92da-d5b067ac9a16", "record_id": "flaws_cloudtrail:0000387:e9a5e35e-3473-4cd7-92da-d5b067ac9a16", "row_index": 387, "timestamp": "2018-07-12T14:59:32Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9a5e35e-3473-4cd7-92da-d5b067ac9a16", "eventTime": "2018-07-12T14:59:32Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc768fc3-e4c8-424e-b3b5-46bf60640", "record_id": "flaws_cloudtrail:0000388:fc768fc3-e4c8-424e-b3b5-46bf60640", "row_index": 388, "timestamp": "2018-07-12T14:59:34Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc768fc3-e4c8-424e-b3b5-46bf60640", "eventTime": "2018-07-12T14:59:34Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3abbf25f-ea08-42ba-837d-dcc69bbb0d6c", "record_id": "flaws_cloudtrail:0000389:3abbf25f-ea08-42ba-837d-dcc69bbb0d6c", "row_index": 389, "timestamp": "2018-07-12T14:59:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3abbf25f-ea08-42ba-837d-dcc69bbb0d6c", "eventTime": "2018-07-12T14:59:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165aca46-a3ef-47f8-9ab9-25d190b7fb74", "record_id": "flaws_cloudtrail:0000390:165aca46-a3ef-47f8-9ab9-25d190b7fb74", "row_index": 390, "timestamp": "2018-07-12T14:59:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165aca46-a3ef-47f8-9ab9-25d190b7fb74", "eventTime": "2018-07-12T14:59:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c0610f-58ab-40b0-8ce6-75da640965", "record_id": "flaws_cloudtrail:0000391:a7c0610f-58ab-40b0-8ce6-75da640965", "row_index": 391, "timestamp": "2018-07-12T14:59:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c0610f-58ab-40b0-8ce6-75da640965", "eventTime": "2018-07-12T14:59:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f38f054-8a74-4364-ad98-939a35042f7", "record_id": "flaws_cloudtrail:0000392:7f38f054-8a74-4364-ad98-939a35042f7", "row_index": 392, "timestamp": "2018-07-12T14:59:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f38f054-8a74-4364-ad98-939a35042f7", "eventTime": "2018-07-12T14:59:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74855-a6c9-44d3-9318-f03752a3a303", "record_id": "flaws_cloudtrail:0000393:b74855-a6c9-44d3-9318-f03752a3a303", "row_index": 393, "timestamp": "2018-07-12T14:59:39Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74855-a6c9-44d3-9318-f03752a3a303", "eventTime": "2018-07-12T14:59:39Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef66a03c-0078-4d25-8f41-f54884", "record_id": "flaws_cloudtrail:0000394:ef66a03c-0078-4d25-8f41-f54884", "row_index": 394, "timestamp": "2018-07-12T14:59:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef66a03c-0078-4d25-8f41-f54884", "eventTime": "2018-07-12T14:59:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84ca69d9-5c06-41fb-84ec-0ddea08225d6", "record_id": "flaws_cloudtrail:0000395:84ca69d9-5c06-41fb-84ec-0ddea08225d6", "row_index": 395, "timestamp": "2018-07-12T14:59:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84ca69d9-5c06-41fb-84ec-0ddea08225d6", "eventTime": "2018-07-12T14:59:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0eff9b0-63d8-4f11-ac05-3bda30f74d8f", "record_id": "flaws_cloudtrail:0000396:f0eff9b0-63d8-4f11-ac05-3bda30f74d8f", "row_index": 396, "timestamp": "2018-07-12T14:59:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0eff9b0-63d8-4f11-ac05-3bda30f74d8f", "eventTime": "2018-07-12T14:59:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fce21b4-9f04-4aa8-a3b5-2518a06fdb0d", "record_id": "flaws_cloudtrail:0000397:2fce21b4-9f04-4aa8-a3b5-2518a06fdb0d", "row_index": 397, "timestamp": "2018-07-12T14:59:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fce21b4-9f04-4aa8-a3b5-2518a06fdb0d", "eventTime": "2018-07-12T14:59:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e93af799-15f6-46bf-a44f-f519cb40bf9a", "record_id": "flaws_cloudtrail:0000398:e93af799-15f6-46bf-a44f-f519cb40bf9a", "row_index": 398, "timestamp": "2018-07-12T14:59:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e93af799-15f6-46bf-a44f-f519cb40bf9a", "eventTime": "2018-07-12T14:59:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f213a574-8e61-492a-8e40-3fcdebfdf09e", "record_id": "flaws_cloudtrail:0000399:f213a574-8e61-492a-8e40-3fcdebfdf09e", "row_index": 399, "timestamp": "2018-07-12T14:59:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f213a574-8e61-492a-8e40-3fcdebfdf09e", "eventTime": "2018-07-12T14:59:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3663d87-8a7e-4c54-82c2-f4c21b7fb99c", "record_id": "flaws_cloudtrail:0000400:d3663d87-8a7e-4c54-82c2-f4c21b7fb99c", "row_index": 400, "timestamp": "2018-07-12T14:59:48Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3663d87-8a7e-4c54-82c2-f4c21b7fb99c", "eventTime": "2018-07-12T14:59:48Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc420731e-73c3-4f1a-b4f1-fde3358e4202", "record_id": "flaws_cloudtrail:0000401:fc420731e-73c3-4f1a-b4f1-fde3358e4202", "row_index": 401, "timestamp": "2018-07-12T14:59:49Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc420731e-73c3-4f1a-b4f1-fde3358e4202", "eventTime": "2018-07-12T14:59:49Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d28c3d1-5f78-49a4-8bec-f5ffb4a299fd", "record_id": "flaws_cloudtrail:0000402:3d28c3d1-5f78-49a4-8bec-f5ffb4a299fd", "row_index": 402, "timestamp": "2018-07-12T14:59:50Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d28c3d1-5f78-49a4-8bec-f5ffb4a299fd", "eventTime": "2018-07-12T14:59:50Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328faafe-0d93-41ac-aaec-c93e07582ebb", "record_id": "flaws_cloudtrail:0000403:328faafe-0d93-41ac-aaec-c93e07582ebb", "row_index": 403, "timestamp": "2018-07-12T14:59:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328faafe-0d93-41ac-aaec-c93e07582ebb", "eventTime": "2018-07-12T14:59:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "482c868b-0f90-4132-ba86-304a4c9e8f54", "record_id": "flaws_cloudtrail:0000404:482c868b-0f90-4132-ba86-304a4c9e8f54", "row_index": 404, "timestamp": "2018-07-12T14:59:53Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "482c868b-0f90-4132-ba86-304a4c9e8f54", "eventTime": "2018-07-12T14:59:53Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3bc068f-565c-4f25-bfd7-a30d077247b04", "record_id": "flaws_cloudtrail:0000405:f3bc068f-565c-4f25-bfd7-a30d077247b04", "row_index": 405, "timestamp": "2018-07-12T14:59:54Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3bc068f-565c-4f25-bfd7-a30d077247b04", "eventTime": "2018-07-12T14:59:54Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5f26658-383c-4f1a-8461-e40863d4dd0f", "record_id": "flaws_cloudtrail:0000406:d5f26658-383c-4f1a-8461-e40863d4dd0f", "row_index": 406, "timestamp": "2018-07-12T14:59:56Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5f26658-383c-4f1a-8461-e40863d4dd0f", "eventTime": "2018-07-12T14:59:56Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cce9f3d-ae4c-4552-968b-28ac4e4898e4", "record_id": "flaws_cloudtrail:0000407:5cce9f3d-ae4c-4552-968b-28ac4e4898e4", "row_index": 407, "timestamp": "2018-07-12T14:59:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cce9f3d-ae4c-4552-968b-28ac4e4898e4", "eventTime": "2018-07-12T14:59:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b21eb02e-5ec1-4e9b-b510-5786d1d9a1c8", "record_id": "flaws_cloudtrail:0000408:b21eb02e-5ec1-4e9b-b510-5786d1d9a1c8", "row_index": 408, "timestamp": "2018-07-12T14:59:59Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b21eb02e-5ec1-4e9b-b510-5786d1d9a1c8", "eventTime": "2018-07-12T14:59:59Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9473a2e7-9c20-491f-9c80-7d4ce7b7c549", "record_id": "flaws_cloudtrail:0000409:9473a2e7-9c20-491f-9c80-7d4ce7b7c549", "row_index": 409, "timestamp": "2018-07-12T15:00:00Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9473a2e7-9c20-491f-9c80-7d4ce7b7c549", "eventTime": "2018-07-12T15:00:00Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a1323f0-275e-45a1-b228-5f83ae58efe5", "record_id": "flaws_cloudtrail:0000410:8a1323f0-275e-45a1-b228-5f83ae58efe5", "row_index": 410, "timestamp": "2018-07-12T15:00:01Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a1323f0-275e-45a1-b228-5f83ae58efe5", "eventTime": "2018-07-12T15:00:01Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b66f8876-2670-4160-88b6-45c23ea298607", "record_id": "flaws_cloudtrail:0000411:b66f8876-2670-4160-88b6-45c23ea298607", "row_index": 411, "timestamp": "2018-07-12T15:00:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b66f8876-2670-4160-88b6-45c23ea298607", "eventTime": "2018-07-12T15:00:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d480bd8-8a30-4896-8417-402fe762541f", "record_id": "flaws_cloudtrail:0000412:8d480bd8-8a30-4896-8417-402fe762541f", "row_index": 412, "timestamp": "2018-07-12T15:00:04Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d480bd8-8a30-4896-8417-402fe762541f", "eventTime": "2018-07-12T15:00:04Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b137f31-b86c-4763-97a1-7b9beac63df9", "record_id": "flaws_cloudtrail:0000413:0b137f31-b86c-4763-97a1-7b9beac63df9", "row_index": 413, "timestamp": "2018-07-12T15:03:45Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b137f31-b86c-4763-97a1-7b9beac63df9", "eventTime": "2018-07-12T15:03:45Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97f5eff-0851-477d-8741-b9d04ba3ecbf", "record_id": "flaws_cloudtrail:0000414:b97f5eff-0851-477d-8741-b9d04ba3ecbf", "row_index": 414, "timestamp": "2018-07-12T15:03:46Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97f5eff-0851-477d-8741-b9d04ba3ecbf", "eventTime": "2018-07-12T15:03:46Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f763da9-66fb-4136-973f-03b4e2fadfd6", "record_id": "flaws_cloudtrail:0000415:6f763da9-66fb-4136-973f-03b4e2fadfd6", "row_index": 415, "timestamp": "2018-07-12T15:03:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f763da9-66fb-4136-973f-03b4e2fadfd6", "eventTime": "2018-07-12T15:03:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3263e57-e107-40f5-acce-30791d77a60e", "record_id": "flaws_cloudtrail:0000416:a3263e57-e107-40f5-acce-30791d77a60e", "row_index": 416, "timestamp": "2018-07-12T15:03:50Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3263e57-e107-40f5-acce-30791d77a60e", "eventTime": "2018-07-12T15:03:50Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ee55ba-d29b-4340-a912-03498bb3", "record_id": "flaws_cloudtrail:0000417:b7ee55ba-d29b-4340-a912-03498bb3", "row_index": 417, "timestamp": "2018-07-12T15:03:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ee55ba-d29b-4340-a912-03498bb3", "eventTime": "2018-07-12T15:03:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "471620dd-e5e6-48ee-9c44-548d2a1e356b", "record_id": "flaws_cloudtrail:0000418:471620dd-e5e6-48ee-9c44-548d2a1e356b", "row_index": 418, "timestamp": "2018-07-12T15:03:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "471620dd-e5e6-48ee-9c44-548d2a1e356b", "eventTime": "2018-07-12T15:03:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d1f58cc-15fd-4592-b10e-7baf6eff599a", "record_id": "flaws_cloudtrail:0000419:3d1f58cc-15fd-4592-b10e-7baf6eff599a", "row_index": 419, "timestamp": "2018-07-12T15:03:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d1f58cc-15fd-4592-b10e-7baf6eff599a", "eventTime": "2018-07-12T15:03:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180219c0-3dce-46de-911a-f4e71be0ad0f", "record_id": "flaws_cloudtrail:0000420:180219c0-3dce-46de-911a-f4e71be0ad0f", "row_index": 420, "timestamp": "2018-07-12T15:03:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180219c0-3dce-46de-911a-f4e71be0ad0f", "eventTime": "2018-07-12T15:03:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36d8c380-a031-4296-935d-278d60295a4e", "record_id": "flaws_cloudtrail:0000421:36d8c380-a031-4296-935d-278d60295a4e", "row_index": 421, "timestamp": "2018-07-12T15:03:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36d8c380-a031-4296-935d-278d60295a4e", "eventTime": "2018-07-12T15:03:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0fbe3b7-9210-44db-9d68-7cad8e654603", "record_id": "flaws_cloudtrail:0000422:b0fbe3b7-9210-44db-9d68-7cad8e654603", "row_index": 422, "timestamp": "2018-07-12T15:03:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0fbe3b7-9210-44db-9d68-7cad8e654603", "eventTime": "2018-07-12T15:03:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0848af-39fe-4101-9b93-65ba30484be", "record_id": "flaws_cloudtrail:0000423:5e0848af-39fe-4101-9b93-65ba30484be", "row_index": 423, "timestamp": "2018-07-12T15:04:00Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0848af-39fe-4101-9b93-65ba30484be", "eventTime": "2018-07-12T15:04:00Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882b7e9e-91d7-43c2-a778-c1dd27863efb", "record_id": "flaws_cloudtrail:0000424:882b7e9e-91d7-43c2-a778-c1dd27863efb", "row_index": 424, "timestamp": "2018-07-12T15:04:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882b7e9e-91d7-43c2-a778-c1dd27863efb", "eventTime": "2018-07-12T15:04:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1eb0d40-1ea4-4473-b386-9f9f9cb98e31", "record_id": "flaws_cloudtrail:0000425:e1eb0d40-1ea4-4473-b386-9f9f9cb98e31", "row_index": 425, "timestamp": "2018-07-12T15:04:03Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1eb0d40-1ea4-4473-b386-9f9f9cb98e31", "eventTime": "2018-07-12T15:04:03Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "744bf6ae-4d78-443b-8bb1-9a5eb979f202", "record_id": "flaws_cloudtrail:0000426:744bf6ae-4d78-443b-8bb1-9a5eb979f202", "row_index": 426, "timestamp": "2018-07-12T15:04:04Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "744bf6ae-4d78-443b-8bb1-9a5eb979f202", "eventTime": "2018-07-12T15:04:04Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:GetEventSelectors on resource: arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e80d9759-3c81-4565-bcad-10477f3dc733", "record_id": "flaws_cloudtrail:0000427:e80d9759-3c81-4565-bcad-10477f3dc733", "row_index": 427, "timestamp": "2018-07-12T15:04:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e80d9759-3c81-4565-bcad-10477f3dc733", "eventTime": "2018-07-12T15:04:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acf5aac9-468c-4dbc-9e97-2f6886b440a5", "record_id": "flaws_cloudtrail:0000428:acf5aac9-468c-4dbc-9e97-2f6886b440a5", "row_index": 428, "timestamp": "2018-07-12T15:04:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acf5aac9-468c-4dbc-9e97-2f6886b440a5", "eventTime": "2018-07-12T15:04:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3deeda9-0032-4b99-9427-879017faadcdf", "record_id": "flaws_cloudtrail:0000429:d3deeda9-0032-4b99-9427-879017faadcdf", "row_index": 429, "timestamp": "2018-07-12T15:04:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3deeda9-0032-4b99-9427-879017faadcdf", "eventTime": "2018-07-12T15:04:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97989ea-d8cc-42af-8d75-84ab5f7f2fa9", "record_id": "flaws_cloudtrail:0000430:97989ea-d8cc-42af-8d75-84ab5f7f2fa9", "row_index": 430, "timestamp": "2018-07-12T15:04:08Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97989ea-d8cc-42af-8d75-84ab5f7f2fa9", "eventTime": "2018-07-12T15:04:08Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f89cbf-b915-474b-a27d-ca78d6ef2e97", "record_id": "flaws_cloudtrail:0000431:44f89cbf-b915-474b-a27d-ca78d6ef2e97", "row_index": 431, "timestamp": "2018-07-12T15:04:09Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f89cbf-b915-474b-a27d-ca78d6ef2e97", "eventTime": "2018-07-12T15:04:09Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76282-2b4e-49c7-8148-c43d2f39dbdd", "record_id": "flaws_cloudtrail:0000432:76282-2b4e-49c7-8148-c43d2f39dbdd", "row_index": 432, "timestamp": "2018-07-12T15:04:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76282-2b4e-49c7-8148-c43d2f39dbdd", "eventTime": "2018-07-12T15:04:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27cf2326-4800-4887-b066-a68b598197e", "record_id": "flaws_cloudtrail:0000433:27cf2326-4800-4887-b066-a68b598197e", "row_index": 433, "timestamp": "2018-07-12T15:04:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27cf2326-4800-4887-b066-a68b598197e", "eventTime": "2018-07-12T15:04:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61faa33e-3e74-4f05-a135-c5f4a22ff4ba", "record_id": "flaws_cloudtrail:0000434:61faa33e-3e74-4f05-a135-c5f4a22ff4ba", "row_index": 434, "timestamp": "2018-07-12T15:04:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61faa33e-3e74-4f05-a135-c5f4a22ff4ba", "eventTime": "2018-07-12T15:04:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98deb560-c839-40f2-9dac-bd3a3520bf51", "record_id": "flaws_cloudtrail:0000435:98deb560-c839-40f2-9dac-bd3a3520bf51", "row_index": 435, "timestamp": "2018-07-12T15:04:16Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98deb560-c839-40f2-9dac-bd3a3520bf51", "eventTime": "2018-07-12T15:04:16Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e72f31-0185-40e9-92c5-b8a39205c", "record_id": "flaws_cloudtrail:0000436:20e72f31-0185-40e9-92c5-b8a39205c", "row_index": 436, "timestamp": "2018-07-12T15:04:18Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e72f31-0185-40e9-92c5-b8a39205c", "eventTime": "2018-07-12T15:04:18Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abfea569-09c1-4f93-ae64-a1f97f9c9fdb", "record_id": "flaws_cloudtrail:0000437:abfea569-09c1-4f93-ae64-a1f97f9c9fdb", "row_index": 437, "timestamp": "2018-07-12T15:04:20Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abfea569-09c1-4f93-ae64-a1f97f9c9fdb", "eventTime": "2018-07-12T15:04:20Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd4caac9-3b24-4649-9ad7-06aef6f310bd", "record_id": "flaws_cloudtrail:0000438:bd4caac9-3b24-4649-9ad7-06aef6f310bd", "row_index": 438, "timestamp": "2018-07-12T15:04:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd4caac9-3b24-4649-9ad7-06aef6f310bd", "eventTime": "2018-07-12T15:04:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e978dcf-3ee1-4a44-ad0c-53be5209f283", "record_id": "flaws_cloudtrail:0000439:7e978dcf-3ee1-4a44-ad0c-53be5209f283", "row_index": 439, "timestamp": "2018-07-12T15:04:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e978dcf-3ee1-4a44-ad0c-53be5209f283", "eventTime": "2018-07-12T15:04:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9be0100-af7d-4152-8efa-ff6bc724fdc6", "record_id": "flaws_cloudtrail:0000440:f9be0100-af7d-4152-8efa-ff6bc724fdc6", "row_index": 440, "timestamp": "2018-07-12T15:04:24Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9be0100-af7d-4152-8efa-ff6bc724fdc6", "eventTime": "2018-07-12T15:04:24Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12976c0-9a0e-4aef-b310-5585b021762a", "record_id": "flaws_cloudtrail:0000441:12976c0-9a0e-4aef-b310-5585b021762a", "row_index": 441, "timestamp": "2018-07-12T15:04:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12976c0-9a0e-4aef-b310-5585b021762a", "eventTime": "2018-07-12T15:04:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da435e74-06d5-4ce0-aca2-a99413e2", "record_id": "flaws_cloudtrail:0000442:da435e74-06d5-4ce0-aca2-a99413e2", "row_index": 442, "timestamp": "2018-07-12T15:04:26Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da435e74-06d5-4ce0-aca2-a99413e2", "eventTime": "2018-07-12T15:04:26Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-south-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59602-1555-4d80-a23b-b8790737343b", "record_id": "flaws_cloudtrail:0000443:59602-1555-4d80-a23b-b8790737343b", "row_index": 443, "timestamp": "2018-07-12T15:04:27Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59602-1555-4d80-a23b-b8790737343b", "eventTime": "2018-07-12T15:04:27Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-3::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b6e123a-adf2-430c-a9b5-5700dff95c55", "record_id": "flaws_cloudtrail:0000444:3b6e123a-adf2-430c-a9b5-5700dff95c55", "row_index": 444, "timestamp": "2018-07-12T15:08:33Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b6e123a-adf2-430c-a9b5-5700dff95c55", "eventTime": "2018-07-12T15:08:33Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d757a105-20bb-47a7-b7af-44eb93becc3a", "record_id": "flaws_cloudtrail:0000445:d757a105-20bb-47a7-b7af-44eb93becc3a", "row_index": 445, "timestamp": "2018-07-12T15:08:34Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d757a105-20bb-47a7-b7af-44eb93becc3a", "eventTime": "2018-07-12T15:08:34Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "874ba5db-c0e5-4a6a-9500-37357be0f91d", "record_id": "flaws_cloudtrail:0000446:874ba5db-c0e5-4a6a-9500-37357be0f91d", "row_index": 446, "timestamp": "2018-07-12T15:08:35Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "874ba5db-c0e5-4a6a-9500-37357be0f91d", "eventTime": "2018-07-12T15:08:35Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f857ac4c-bec9-46f9-9251-15364c233ab", "record_id": "flaws_cloudtrail:0000447:f857ac4c-bec9-46f9-9251-15364c233ab", "row_index": 447, "timestamp": "2018-07-12T15:08:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f857ac4c-bec9-46f9-9251-15364c233ab", "eventTime": "2018-07-12T15:08:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:sa-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c5b090-3fa0-4eee-8fc1-bf594376a5158", "record_id": "flaws_cloudtrail:0000448:80c5b090-3fa0-4eee-8fc1-bf594376a5158", "row_index": 448, "timestamp": "2018-07-12T15:08:38Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c5b090-3fa0-4eee-8fc1-bf594376a5158", "eventTime": "2018-07-12T15:08:38Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ca-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cabbd8de-5ab2-4bb3-a1fe-f5ce80d64276", "record_id": "flaws_cloudtrail:0000449:cabbd8de-5ab2-4bb3-a1fe-f5ce80d64276", "row_index": 449, "timestamp": "2018-07-12T15:08:40Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cabbd8de-5ab2-4bb3-a1fe-f5ce80d64276", "eventTime": "2018-07-12T15:08:40Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b6c070-56ef-434e-a4bf-4237a177724f", "record_id": "flaws_cloudtrail:0000450:f2b6c070-56ef-434e-a4bf-4237a177724f", "row_index": 450, "timestamp": "2018-07-12T15:08:42Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b6c070-56ef-434e-a4bf-4237a177724f", "eventTime": "2018-07-12T15:08:42Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eecd4e33-a56a-447d-b17d-848809a64d71", "record_id": "flaws_cloudtrail:0000451:eecd4e33-a56a-447d-b17d-848809a64d71", "row_index": 451, "timestamp": "2018-07-12T15:08:43Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eecd4e33-a56a-447d-b17d-848809a64d71", "eventTime": "2018-07-12T15:08:43Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66f493cd-521c-47d4-bc40-03c3e0f85a04", "record_id": "flaws_cloudtrail:0000452:66f493cd-521c-47d4-bc40-03c3e0f85a04", "row_index": 452, "timestamp": "2018-07-12T15:08:44Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66f493cd-521c-47d4-bc40-03c3e0f85a04", "eventTime": "2018-07-12T15:08:44Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20ce10fe-6026-4918-b88c-cf0dfafd009b", "record_id": "flaws_cloudtrail:0000453:20ce10fe-6026-4918-b88c-cf0dfafd009b", "row_index": 453, "timestamp": "2018-07-12T15:08:45Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20ce10fe-6026-4918-b88c-cf0dfafd009b", "eventTime": "2018-07-12T15:08:45Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bae914a-c973-4a03-9c40-177d0bd8d369", "record_id": "flaws_cloudtrail:0000454:5bae914a-c973-4a03-9c40-177d0bd8d369", "row_index": 454, "timestamp": "2018-07-12T15:08:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bae914a-c973-4a03-9c40-177d0bd8d369", "eventTime": "2018-07-12T15:08:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "173d938f-0137-42dd-8f90-15767a", "record_id": "flaws_cloudtrail:0000455:173d938f-0137-42dd-8f90-15767a", "row_index": 455, "timestamp": "2018-07-12T15:08:48Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "173d938f-0137-42dd-8f90-15767a", "eventTime": "2018-07-12T15:08:48Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b02b69-49b1-47c2-9a88-a933357e4a7", "record_id": "flaws_cloudtrail:0000456:d6b02b69-49b1-47c2-9a88-a933357e4a7", "row_index": 456, "timestamp": "2018-07-12T15:08:49Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b02b69-49b1-47c2-9a88-a933357e4a7", "eventTime": "2018-07-12T15:08:49Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d853d20d-22fa-40e6-b180-19f13c1592ca", "record_id": "flaws_cloudtrail:0000457:d853d20d-22fa-40e6-b180-19f13c1592ca", "row_index": 457, "timestamp": "2018-07-12T15:08:50Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d853d20d-22fa-40e6-b180-19f13c1592ca", "eventTime": "2018-07-12T15:08:50Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7872a48-26ce-43d2-8445-890e2d84cb20", "record_id": "flaws_cloudtrail:0000458:f7872a48-26ce-43d2-8445-890e2d84cb20", "row_index": 458, "timestamp": "2018-07-12T15:08:53Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7872a48-26ce-43d2-8445-890e2d84cb20", "eventTime": "2018-07-12T15:08:53Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b8f6a85-d324-4dba-bde9-7613a84dcc51", "record_id": "flaws_cloudtrail:0000459:7b8f6a85-d324-4dba-bde9-7613a84dcc51", "row_index": 459, "timestamp": "2018-07-12T15:08:55Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b8f6a85-d324-4dba-bde9-7613a84dcc51", "eventTime": "2018-07-12T15:08:55Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73d10f4f-336c-4c18-aace-253cbb8eea2d", "record_id": "flaws_cloudtrail:0000460:73d10f4f-336c-4c18-aace-253cbb8eea2d", "row_index": 460, "timestamp": "2018-07-12T15:08:56Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73d10f4f-336c-4c18-aace-253cbb8eea2d", "eventTime": "2018-07-12T15:08:56Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab5652e5-b717-4e43-8516-b959922a453c", "record_id": "flaws_cloudtrail:0000461:ab5652e5-b717-4e43-8516-b959922a453c", "row_index": 461, "timestamp": "2018-07-12T15:08:56Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab5652e5-b717-4e43-8516-b959922a453c", "eventTime": "2018-07-12T15:08:56Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e223ce-4c09-47bf-a43e-df112c0e2886", "record_id": "flaws_cloudtrail:0000462:15e223ce-4c09-47bf-a43e-df112c0e2886", "row_index": 462, "timestamp": "2018-07-12T15:08:57Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e223ce-4c09-47bf-a43e-df112c0e2886", "eventTime": "2018-07-12T15:08:57Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af05392d-d034-44dc-8f5a-1528b9e90c9d", "record_id": "flaws_cloudtrail:0000463:af05392d-d034-44dc-8f5a-1528b9e90c9d", "row_index": 463, "timestamp": "2018-07-12T15:08:58Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af05392d-d034-44dc-8f5a-1528b9e90c9d", "eventTime": "2018-07-12T15:08:58Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec6fca43-39cc-4f73-99ec-ad6d65096cca", "record_id": "flaws_cloudtrail:0000464:ec6fca43-39cc-4f73-99ec-ad6d65096cca", "row_index": 464, "timestamp": "2018-07-12T15:09:00Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec6fca43-39cc-4f73-99ec-ad6d65096cca", "eventTime": "2018-07-12T15:09:00Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530528-6d10-4d9f-91c6-0d8c624316d2d", "record_id": "flaws_cloudtrail:0000465:530528-6d10-4d9f-91c6-0d8c624316d2d", "row_index": 465, "timestamp": "2018-07-12T15:09:01Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530528-6d10-4d9f-91c6-0d8c624316d2d", "eventTime": "2018-07-12T15:09:01Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a49709-9d12-47a3-a88f-6b91d95a7e6c", "record_id": "flaws_cloudtrail:0000466:6a49709-9d12-47a3-a88f-6b91d95a7e6c", "row_index": 466, "timestamp": "2018-07-12T15:09:03Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a49709-9d12-47a3-a88f-6b91d95a7e6c", "eventTime": "2018-07-12T15:09:03Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eed376229-2e40-426b-bed0-a6a690bbbf58", "record_id": "flaws_cloudtrail:0000467:eed376229-2e40-426b-bed0-a6a690bbbf58", "row_index": 467, "timestamp": "2018-07-12T15:09:04Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eed376229-2e40-426b-bed0-a6a690bbbf58", "eventTime": "2018-07-12T15:09:04Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e973e6-d380-490a-a882-77c98092ed3", "record_id": "flaws_cloudtrail:0000468:52e973e6-d380-490a-a882-77c98092ed3", "row_index": 468, "timestamp": "2018-07-12T15:09:05Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e973e6-d380-490a-a882-77c98092ed3", "eventTime": "2018-07-12T15:09:05Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e42f80f7-302b-40b9-ab9e-f5d82aa14626", "record_id": "flaws_cloudtrail:0000469:e42f80f7-302b-40b9-ab9e-f5d82aa14626", "row_index": 469, "timestamp": "2018-07-12T15:09:07Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e42f80f7-302b-40b9-ab9e-f5d82aa14626", "eventTime": "2018-07-12T15:09:07Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b662f9-a31b-41b4-a513-9f785a0264d0", "record_id": "flaws_cloudtrail:0000470:06b662f9-a31b-41b4-a513-9f785a0264d0", "row_index": 470, "timestamp": "2018-07-12T15:09:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b662f9-a31b-41b4-a513-9f785a0264d0", "eventTime": "2018-07-12T15:09:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d36fd9c9-2878-4d5e-8fb9-0b441beaf276", "record_id": "flaws_cloudtrail:0000471:d36fd9c9-2878-4d5e-8fb9-0b441beaf276", "row_index": 471, "timestamp": "2018-07-12T15:09:09Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d36fd9c9-2878-4d5e-8fb9-0b441beaf276", "eventTime": "2018-07-12T15:09:09Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b19f115-70e7-422a-9302-a7cdd320be3b", "record_id": "flaws_cloudtrail:0000472:7b19f115-70e7-422a-9302-a7cdd320be3b", "row_index": 472, "timestamp": "2018-07-12T15:09:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b19f115-70e7-422a-9302-a7cdd320be3b", "eventTime": "2018-07-12T15:09:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "815311e09-f216-4d0c-b08e-0444ceaaada7", "record_id": "flaws_cloudtrail:0000473:815311e09-f216-4d0c-b08e-0444ceaaada7", "row_index": 473, "timestamp": "2018-07-12T15:09:16Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "815311e09-f216-4d0c-b08e-0444ceaaada7", "eventTime": "2018-07-12T15:09:16Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3eaad1c-9db6-4497-a2b7-f9b5c856636e", "record_id": "flaws_cloudtrail:0000474:f3eaad1c-9db6-4497-a2b7-f9b5c856636e", "row_index": 474, "timestamp": "2018-07-12T15:09:18Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3eaad1c-9db6-4497-a2b7-f9b5c856636e", "eventTime": "2018-07-12T15:09:18Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "621043d2d-0534-4842-8868-811f24c007f9", "record_id": "flaws_cloudtrail:0000475:621043d2d-0534-4842-8868-811f24c007f9", "row_index": 475, "timestamp": "2018-07-12T15:09:20Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "621043d2d-0534-4842-8868-811f24c007f9", "eventTime": "2018-07-12T15:09:20Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e525cdf1-4810-44ce-a3de-6ed070a8aefe", "record_id": "flaws_cloudtrail:0000476:e525cdf1-4810-44ce-a3de-6ed070a8aefe", "row_index": 476, "timestamp": "2018-07-12T15:09:21Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e525cdf1-4810-44ce-a3de-6ed070a8aefe", "eventTime": "2018-07-12T15:09:21Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ac72a5-472f-4928-b1b6-30b4520f8110", "record_id": "flaws_cloudtrail:0000477:04ac72a5-472f-4928-b1b6-30b4520f8110", "row_index": 477, "timestamp": "2018-07-12T15:09:22Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ac72a5-472f-4928-b1b6-30b4520f8110", "eventTime": "2018-07-12T15:09:22Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4211a12-d826-44c0-893c-ea1080895fd6", "record_id": "flaws_cloudtrail:0000478:f4211a12-d826-44c0-893c-ea1080895fd6", "row_index": 478, "timestamp": "2018-07-12T15:09:23Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4211a12-d826-44c0-893c-ea1080895fd6", "eventTime": "2018-07-12T15:09:23Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b8079a-ee95-45cf-9a41-27d24e74d652", "record_id": "flaws_cloudtrail:0000479:54b8079a-ee95-45cf-9a41-27d24e74d652", "row_index": 479, "timestamp": "2018-07-12T15:09:24Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b8079a-ee95-45cf-9a41-27d24e74d652", "eventTime": "2018-07-12T15:09:24Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4051e584-1414-4e1b-a63b-1613a10770de", "record_id": "flaws_cloudtrail:0000480:4051e584-1414-4e1b-a63b-1613a10770de", "row_index": 480, "timestamp": "2018-07-12T15:09:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4051e584-1414-4e1b-a63b-1613a10770de", "eventTime": "2018-07-12T15:09:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb739a57-4a3f-40c0-a31f-aacbec9c930d", "record_id": "flaws_cloudtrail:0000481:cb739a57-4a3f-40c0-a31f-aacbec9c930d", "row_index": 481, "timestamp": "2018-07-12T15:09:27Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb739a57-4a3f-40c0-a31f-aacbec9c930d", "eventTime": "2018-07-12T15:09:27Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fce3b51-4010-420c-8d75-eb3947f964156", "record_id": "flaws_cloudtrail:0000482:9fce3b51-4010-420c-8d75-eb3947f964156", "row_index": 482, "timestamp": "2018-07-12T15:09:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fce3b51-4010-420c-8d75-eb3947f964156", "eventTime": "2018-07-12T15:09:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058697daa-8823-4129-bcbc-75d4dae7d295", "record_id": "flaws_cloudtrail:0000483:058697daa-8823-4129-bcbc-75d4dae7d295", "row_index": 483, "timestamp": "2018-07-12T15:09:29Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058697daa-8823-4129-bcbc-75d4dae7d295", "eventTime": "2018-07-12T15:09:29Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea24410e-546f-494a-bbd6-7e7ff22fcd25", "record_id": "flaws_cloudtrail:0000484:ea24410e-546f-494a-bbd6-7e7ff22fcd25", "row_index": 484, "timestamp": "2018-07-12T15:09:31Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea24410e-546f-494a-bbd6-7e7ff22fcd25", "eventTime": "2018-07-12T15:09:31Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0b19f1-ec8b-4b0d-adde-66b19e8b3c6a", "record_id": "flaws_cloudtrail:0000485:ea0b19f1-ec8b-4b0d-adde-66b19e8b3c6a", "row_index": 485, "timestamp": "2018-07-12T15:09:32Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0b19f1-ec8b-4b0d-adde-66b19e8b3c6a", "eventTime": "2018-07-12T15:09:32Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dca84cc-f0e3-4d7b-bb98-19990bc9f9a", "record_id": "flaws_cloudtrail:0000486:3dca84cc-f0e3-4d7b-bb98-19990bc9f9a", "row_index": 486, "timestamp": "2018-07-12T15:09:33Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dca84cc-f0e3-4d7b-bb98-19990bc9f9a", "eventTime": "2018-07-12T15:09:33Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d58807e4-48c4-4a83-ac76-e34aa2ca0c29", "record_id": "flaws_cloudtrail:0000487:d58807e4-48c4-4a83-ac76-e34aa2ca0c29", "row_index": 487, "timestamp": "2018-07-12T15:09:34Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d58807e4-48c4-4a83-ac76-e34aa2ca0c29", "eventTime": "2018-07-12T15:09:34Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be81df80-e876-4603-b329-426c7c654187", "record_id": "flaws_cloudtrail:0000488:be81df80-e876-4603-b329-426c7c654187", "row_index": 488, "timestamp": "2018-07-12T15:09:35Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be81df80-e876-4603-b329-426c7c654187", "eventTime": "2018-07-12T15:09:35Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "655e449e-e571-4baf-aaec-719e47659211", "record_id": "flaws_cloudtrail:0000489:655e449e-e571-4baf-aaec-719e47659211", "row_index": 489, "timestamp": "2018-07-12T15:09:35Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "655e449e-e571-4baf-aaec-719e47659211", "eventTime": "2018-07-12T15:09:35Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab2beb40-f5d0-4951-aa12-8bf0d0f945c0", "record_id": "flaws_cloudtrail:0000490:ab2beb40-f5d0-4951-aa12-8bf0d0f945c0", "row_index": 490, "timestamp": "2018-07-12T15:09:37Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab2beb40-f5d0-4951-aa12-8bf0d0f945c0", "eventTime": "2018-07-12T15:09:37Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c71c5ded-3060-4f79-bd28-fe5bca94772", "record_id": "flaws_cloudtrail:0000491:c71c5ded-3060-4f79-bd28-fe5bca94772", "row_index": 491, "timestamp": "2018-07-12T15:09:39Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c71c5ded-3060-4f79-bd28-fe5bca94772", "eventTime": "2018-07-12T15:09:39Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028281c-6cb8-4194-a31e-711b67926601", "record_id": "flaws_cloudtrail:0000492:028281c-6cb8-4194-a31e-711b67926601", "row_index": 492, "timestamp": "2018-07-12T15:09:40Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028281c-6cb8-4194-a31e-711b67926601", "eventTime": "2018-07-12T15:09:40Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d136027-a100-45c3-8bfd-fa4198954050", "record_id": "flaws_cloudtrail:0000493:d136027-a100-45c3-8bfd-fa4198954050", "row_index": 493, "timestamp": "2018-07-12T15:09:41Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d136027-a100-45c3-8bfd-fa4198954050", "eventTime": "2018-07-12T15:09:41Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c258f3d-3aaf-45ed-9731-8f060449", "record_id": "flaws_cloudtrail:0000494:9c258f3d-3aaf-45ed-9731-8f060449", "row_index": 494, "timestamp": "2018-07-12T15:09:43Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c258f3d-3aaf-45ed-9731-8f060449", "eventTime": "2018-07-12T15:09:43Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5476c9e-24ef-4131-91a6-5da421958be0", "record_id": "flaws_cloudtrail:0000495:b5476c9e-24ef-4131-91a6-5da421958be0", "row_index": 495, "timestamp": "2018-07-12T15:09:45Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5476c9e-24ef-4131-91a6-5da421958be0", "eventTime": "2018-07-12T15:09:45Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0283bbd-b8c4-4341-a573-964ce064138", "record_id": "flaws_cloudtrail:0000496:c0283bbd-b8c4-4341-a573-964ce064138", "row_index": 496, "timestamp": "2018-07-12T15:09:46Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0283bbd-b8c4-4341-a573-964ce064138", "eventTime": "2018-07-12T15:09:46Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc2c3d8-d521-42a9-b072-a13d8268ddaa", "record_id": "flaws_cloudtrail:0000497:5bc2c3d8-d521-42a9-b072-a13d8268ddaa", "row_index": 497, "timestamp": "2018-07-12T15:09:48Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc2c3d8-d521-42a9-b072-a13d8268ddaa", "eventTime": "2018-07-12T15:09:48Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b05dd2b5-4942-4293-b229-894102c91b0", "record_id": "flaws_cloudtrail:0000498:b05dd2b5-4942-4293-b229-894102c91b0", "row_index": 498, "timestamp": "2018-07-12T15:09:49Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b05dd2b5-4942-4293-b229-894102c91b0", "eventTime": "2018-07-12T15:09:49Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddad558e-fc5b-4296-aaab-53f5e6049708", "record_id": "flaws_cloudtrail:0000499:ddad558e-fc5b-4296-aaab-53f5e6049708", "row_index": 499, "timestamp": "2018-07-12T15:09:51Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddad558e-fc5b-4296-aaab-53f5e6049708", "eventTime": "2018-07-12T15:09:51Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33968-af94-4144-9194-e47f82e03eb7", "record_id": "flaws_cloudtrail:0000500:33968-af94-4144-9194-e47f82e03eb7", "row_index": 500, "timestamp": "2018-07-12T15:09:52Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33968-af94-4144-9194-e47f82e03eb7", "eventTime": "2018-07-12T15:09:52Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03a16cd-4d32-4cf4-aa15-6b2f59e560914", "record_id": "flaws_cloudtrail:0000501:b03a16cd-4d32-4cf4-aa15-6b2f59e560914", "row_index": 501, "timestamp": "2018-07-12T15:09:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03a16cd-4d32-4cf4-aa15-6b2f59e560914", "eventTime": "2018-07-12T15:09:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "[aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be988026-7bfe-4519-97a0-a0c88601a7a1", "record_id": "flaws_cloudtrail:0000502:7be988026-7bfe-4519-97a0-a0c88601a7a1", "row_index": 502, "timestamp": "2018-07-12T15:09:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be988026-7bfe-4519-97a0-a0c88601a7a1", "eventTime": "2018-07-12T15:09:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76e79b5-dba7-45a4-a46c-5a1db82b4940", "record_id": "flaws_cloudtrail:0000503:f76e79b5-dba7-45a4-a46c-5a1db82b4940", "row_index": 503, "timestamp": "2018-07-12T15:09:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76e79b5-dba7-45a4-a46c-5a1db82b4940", "eventTime": "2018-07-12T15:09:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe28bb66-b5c4-4a5e-a155-b8b0a87aae4b", "record_id": "flaws_cloudtrail:0000504:fe28bb66-b5c4-4a5e-a155-b8b0a87aae4b", "row_index": 504, "timestamp": "2018-07-12T15:09:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe28bb66-b5c4-4a5e-a155-b8b0a87aae4b", "eventTime": "2018-07-12T15:09:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b23aef4b-1cc6-4244-9c83-7ceb687905a", "record_id": "flaws_cloudtrail:0000505:b23aef4b-1cc6-4244-9c83-7ceb687905a", "row_index": 505, "timestamp": "2018-07-12T15:09:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b23aef4b-1cc6-4244-9c83-7ceb687905a", "eventTime": "2018-07-12T15:09:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d76b07c-899d-4b2b-a0c6-0aad68337", "record_id": "flaws_cloudtrail:0000506:4d76b07c-899d-4b2b-a0c6-0aad68337", "row_index": 506, "timestamp": "2018-07-12T15:09:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d76b07c-899d-4b2b-a0c6-0aad68337", "eventTime": "2018-07-12T15:09:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294154b-2f05-438c-9b08-9c1d713e00b4", "record_id": "flaws_cloudtrail:0000507:294154b-2f05-438c-9b08-9c1d713e00b4", "row_index": 507, "timestamp": "2018-07-12T15:10:00Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294154b-2f05-438c-9b08-9c1d713e00b4", "eventTime": "2018-07-12T15:10:00Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65004d16-00bf-41c3-a071-16c7e6bc2a35", "record_id": "flaws_cloudtrail:0000508:65004d16-00bf-41c3-a071-16c7e6bc2a35", "row_index": 508, "timestamp": "2018-07-12T15:10:01Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65004d16-00bf-41c3-a071-16c7e6bc2a35", "eventTime": "2018-07-12T15:10:01Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a504c5e1-f4b0-4d40-8680-5b068fa311639", "record_id": "flaws_cloudtrail:0000509:a504c5e1-f4b0-4d40-8680-5b068fa311639", "row_index": 509, "timestamp": "2018-07-12T15:10:02Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a504c5e1-f4b0-4d40-8680-5b068fa311639", "eventTime": "2018-07-12T15:10:02Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb33de10-1b44-4aa8-b8db-edeb7f2c6e05", "record_id": "flaws_cloudtrail:0000510:cb33de10-1b44-4aa8-b8db-edeb7f2c6e05", "row_index": 510, "timestamp": "2018-07-12T15:10:29Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb33de10-1b44-4aa8-b8db-edeb7f2c6e05", "eventTime": "2018-07-12T15:10:29Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cc18395-a2ed-447d-adf2-d2a0dfb748bb", "record_id": "flaws_cloudtrail:0000511:9cc18395-a2ed-447d-adf2-d2a0dfb748bb", "row_index": 511, "timestamp": "2018-07-12T15:10:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cc18395-a2ed-447d-adf2-d2a0dfb748bb", "eventTime": "2018-07-12T15:10:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e39dff6-aeb2-46e5-adb4-5af6e708ae3e", "record_id": "flaws_cloudtrail:0000512:8e39dff6-aeb2-46e5-adb4-5af6e708ae3e", "row_index": 512, "timestamp": "2018-07-12T15:10:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e39dff6-aeb2-46e5-adb4-5af6e708ae3e", "eventTime": "2018-07-12T15:10:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d24c802e-d50c-4a72-803e-5b72b88f510b", "record_id": "flaws_cloudtrail:0000513:d24c802e-d50c-4a72-803e-5b72b88f510b", "row_index": 513, "timestamp": "2018-07-12T15:10:33Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d24c802e-d50c-4a72-803e-5b72b88f510b", "eventTime": "2018-07-12T15:10:33Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97275a12-bc65-41e3-878e-fb3202104d5c", "record_id": "flaws_cloudtrail:0000514:97275a12-bc65-41e3-878e-fb3202104d5c", "row_index": 514, "timestamp": "2018-07-12T15:10:34Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97275a12-bc65-41e3-878e-fb3202104d5c", "eventTime": "2018-07-12T15:10:34Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47bdc021-4169-4105-92ed-517c350d77ea", "record_id": "flaws_cloudtrail:0000515:47bdc021-4169-4105-92ed-517c350d77ea", "row_index": 515, "timestamp": "2018-07-12T15:10:35Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47bdc021-4169-4105-92ed-517c350d77ea", "eventTime": "2018-07-12T15:10:35Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b97ff08-48f9-4aeb-910f-4a55f09f72fc", "record_id": "flaws_cloudtrail:0000516:5b97ff08-48f9-4aeb-910f-4a55f09f72fc", "row_index": 516, "timestamp": "2018-07-12T15:10:37Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b97ff08-48f9-4aeb-910f-4a55f09f72fc", "eventTime": "2018-07-12T15:10:37Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c57f242-f868-4622-a3d5-964ce36db757", "record_id": "flaws_cloudtrail:0000517:6c57f242-f868-4622-a3d5-964ce36db757", "row_index": 517, "timestamp": "2018-07-12T15:10:39Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c57f242-f868-4622-a3d5-964ce36db757", "eventTime": "2018-07-12T15:10:39Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:GetEventSelectors on resource: arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d773de7b-030b-4580-a5bc-45e83c868a43", "record_id": "flaws_cloudtrail:0000518:d773de7b-030b-4580-a5bc-45e83c868a43", "row_index": 518, "timestamp": "2018-07-12T15:19:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d773de7b-030b-4580-a5bc-45e83c868a43", "eventTime": "2018-07-12T15:19:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b806849a-0e4b-4279-b48d-1623461f9942", "record_id": "flaws_cloudtrail:0000519:1b806849a-0e4b-4279-b48d-1623461f9942", "row_index": 519, "timestamp": "2018-07-12T15:19:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b806849a-0e4b-4279-b48d-1623461f9942", "eventTime": "2018-07-12T15:19:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b846b150-0088-4bc0-9a96-a50500a60", "record_id": "flaws_cloudtrail:0000520:b846b150-0088-4bc0-9a96-a50500a60", "row_index": 520, "timestamp": "2018-07-12T15:19:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b846b150-0088-4bc0-9a96-a50500a60", "eventTime": "2018-07-12T15:19:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a9865cd-6d00-4403-a05b-b50733837f0e", "record_id": "flaws_cloudtrail:0000521:9a9865cd-6d00-4403-a05b-b50733837f0e", "row_index": 521, "timestamp": "2018-07-12T15:20:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a9865cd-6d00-4403-a05b-b50733837f0e", "eventTime": "2018-07-12T15:20:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "335a6279-1a28-4bae-9bef-c1011ea0890a", "record_id": "flaws_cloudtrail:0000522:335a6279-1a28-4bae-9bef-c1011ea0890a", "row_index": 522, "timestamp": "2018-07-12T15:20:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "335a6279-1a28-4bae-9bef-c1011ea0890a", "eventTime": "2018-07-12T15:20:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkYmd0d2I1dXZZS292Y3BMK1NLMWl0c29PdXJNTmprVGNPY3hzcWVZTmprRE1FUDRSdXU5VTJnNTdPUkh4Q1psMFc3Y3dIZ09CL003NFplZkM3amo0Z2RQb2tVVVFVOEZabDhES01zeTlLdWxuMmYvcFRYUTExODdhOWw2ZldaS2loQmYyZWJmVHJmU0RyUTllT3cxUTJCVmYvMEZ6b1RraXM0eEpYV0tsTVlxeHBwUlVQNzVGM0JDWFllK2k0UE5odjRpIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0ff13d6-0d79-491d-98a4-8d17dffc5247", "record_id": "flaws_cloudtrail:0000523:d0ff13d6-0d79-491d-98a4-8d17dffc5247", "row_index": 523, "timestamp": "2018-07-12T15:20:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0ff13d6-0d79-491d-98a4-8d17dffc5247", "eventTime": "2018-07-12T15:20:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwTEh1RTJZUUIvY0tHM0NOSVgycEw5eXdoamZMVXZUYk9ncVYxUEdXU3BmdXVjMEI5eDJ1czk2OFdXTmFPNHNNVTJaQkUxL2NGTEgyOTY5Y0lSYU1DczZuQnNGQXVzMXI2QkxEYkNsbUMyZHFCZmN6M2JwdHZUVlFSeU1veGl3VXJ5aExFN0NiYk15YmlGVkg3blhPWTlJYnB6bTN3TzYwK1hHckNtNldlUDcrZExsa0VxVGtJNjh3MEVuMnBGVFJHTXB4IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ccb75b9-4d25-4ea6-9052-b741349abbb9", "record_id": "flaws_cloudtrail:0000524:0ccb75b9-4d25-4ea6-9052-b741349abbb9", "row_index": 524, "timestamp": "2018-07-12T15:20:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ccb75b9-4d25-4ea6-9052-b741349abbb9", "eventTime": "2018-07-12T15:20:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZUmt6dmRyRWpWVWFmM3gzMXB4NW0wdHkrRWVhVFJqTms0dXdBeENEeEI2TlhiZVNJeHYxRWRXZUVhS2NOQVludDdyUGlMSWlmVFMxSnZTaVlrUnVPTWs5WlFtcVM4WGtsSUZYZEdZRGo2c0VkcFBRWE9NYUJYdFhGTzZFM0JTTWMzeEdGTEFBOVJuL0dtTk93SFd0OThaQXdwUzJtZ3NVVlIwSG82K00vc005MVQyYm9xOVFSOFJkNlZzKzFTN2FTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b012db-0b2f-4f68-9717-10e8dd247562a", "record_id": "flaws_cloudtrail:0000525:31b012db-0b2f-4f68-9717-10e8dd247562a", "row_index": 525, "timestamp": "2018-07-12T15:20:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b012db-0b2f-4f68-9717-10e8dd247562a", "eventTime": "2018-07-12T15:20:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPWDFtTWVDaHMxemlSUXJZN1FmZjVFeWtTcjBLby9ZWXYzdHd4WXVnQlJUZkdDU3lvN01vekJvN3ZQQ1RXWlkwenpwVWIxeHM3SDg5WUh6YktUTTQyUlIvcFhGRTh6clZuVC9Zbk9FdXB2amNUdUJ1QUpWZVR1dUd4Z216elh4dmF0eGVpeWJhRE5JaGYrS2NnUkFIRDhwWkliOVk1UlIrZlJCcll1bklqTTRYMmlLT3pXWmVDWVpqeWRRaktqN3kiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c084993f-90a2-4fe6-abf7-0a6eb8f65d6e", "record_id": "flaws_cloudtrail:0000526:4c084993f-90a2-4fe6-abf7-0a6eb8f65d6e", "row_index": 526, "timestamp": "2018-07-12T15:21:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c084993f-90a2-4fe6-abf7-0a6eb8f65d6e", "eventTime": "2018-07-12T15:21:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdTdXUUt5TUd0YUJ3TUljNWprMWlnK1lDUUMyR05Uano5a1JSOUNtaFZqc1lLMlhzRFVObGFiY0FZS1dLbFJLeDgrWnlVdy9yVnNIMlVuS2VIMzlrMm0zd3V6T0t1NWFNcmkrZWw3ZnlyWm1HK1k0YnFLaFhNQTlXNWdyY000dUpYRGhqdXJBQ0U3aUVjSzBzSHJldEVpVWRmTWJRcVNPMS82SU1xZ1RLSndGeERhdDh0c0VRWExSc2ZmWXRsaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "234ce2ff-ee20-44cd-a98c-f2830c2a8a37", "record_id": "flaws_cloudtrail:0000527:234ce2ff-ee20-44cd-a98c-f2830c2a8a37", "row_index": 527, "timestamp": "2018-07-12T15:21:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "234ce2ff-ee20-44cd-a98c-f2830c2a8a37", "eventTime": "2018-07-12T15:21:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5QU9tZjBMUHF4WGhJZzlDTTR5NjJ3U0JxZnFINHRTVTlIaFl5L1BTazFwOGNEMkFNdmVRYXZ2aTFWYmpNMWV1UENkU3NockxsWk93dW9xOU9OV1RhOExpelhBSC9KS0ZseEVtVDBYeFNlbHBhTXdmSnZEb1cvVDdFUmlYcFl2WVkzdDNOZCtiRzA2SGRiM2QwZmJMOFdDUXpnTElMUUZ1SXhtT3hKcmJsTTBEMDZhUWhjejlmMjdHbTFka3Q5MUlKVHpoIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85124fee-f6b5-4c80-8344-ae2c73b70bb8", "record_id": "flaws_cloudtrail:0000528:85124fee-f6b5-4c80-8344-ae2c73b70bb8", "row_index": 528, "timestamp": "2018-07-12T15:21:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85124fee-f6b5-4c80-8344-ae2c73b70bb8", "eventTime": "2018-07-12T15:21:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFRllXd0tEaFpCdmVPR3lPY1QrSGJIcmsvZWtMS1M5REVqMzQydDJPZ1hDWndKOEYzQlFKS2w5QXp4NkJZQ0RsRG5zSDRhM0NjVng3eStwWFB0cDhYNit3RUt6QWoyMHNXTjRmZjduRmQ2WnR4TXBabE1HVHkvU2tVUEFHSFBzU1JNUGtCQlRkQkY0ZmIrYnBXNkNNRmpOcWI2czY4NkZuL3Nva0t0VjdibXN0ZSs2Y05FaytuOEtKWnQxMWEvQzQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4685eaeb-46b9-481c-ba96-12d151979f344", "record_id": "flaws_cloudtrail:0000529:4685eaeb-46b9-481c-ba96-12d151979f344", "row_index": 529, "timestamp": "2018-07-12T15:21:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4685eaeb-46b9-481c-ba96-12d151979f344", "eventTime": "2018-07-12T15:21:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaHZnNVN2TTZQb1VhY2NlUVZEckI5bDdlanV5R3RYWG82R2wwMi9IaE1Wdm5OMXcxbXZMSklxY3cwbUFLYkhidm1peUtLV0hCOTJaamxVS0trZHhKMlR2czVBcHBFZ3JtcjFnOHhBU1lackZqQktZV1hGSEtYVzNIWXh4R0JUVzNqeE4wc0x2eHZ3OE4ybE95WUJoMEhMMWR2a0pXaUpwdFlUWGM1TjV1OS95eTNJTUtnVFhCOTJCdUJNVU83UzJDT2s4IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63efa0d4-0cfc-4d10-afd1-33279e683d95", "record_id": "flaws_cloudtrail:0000530:63efa0d4-0cfc-4d10-afd1-33279e683d95", "row_index": 530, "timestamp": "2018-07-12T15:21:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63efa0d4-0cfc-4d10-afd1-33279e683d95", "eventTime": "2018-07-12T15:21:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWQTdEditTNDRINlhQREI0YnlGMHNrc3NVcVBESWJ1M1h2YmRKVSs5dW9Xd0c2REZrWDhKclIrVDI1THdNYkNEUHJteTVjMGo4RnN3RitJa3BYYWYzMlJwTGdURm01dFljcitTMStPcVBBV0U1WmRUZWtTUitYUE9qR0FqQ293ZXd5a2pFc1NkUTZMTDRiTVVVcHMzVE1jczJSblI4RnBWT0R1OXJTNm82eFBrbE5KMHVhY040R0UxY0tuODJEMHI0Z3BCIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "444ea9fa-afca-4c76-9bf8-cb4635aa0c2d", "record_id": "flaws_cloudtrail:0000531:444ea9fa-afca-4c76-9bf8-cb4635aa0c2d", "row_index": 531, "timestamp": "2018-07-12T15:21:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "444ea9fa-afca-4c76-9bf8-cb4635aa0c2d", "eventTime": "2018-07-12T15:21:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsMkVHUW5KbVUwOWEyYXFhR3g4UnA2dkxya0VPRVFQOFVCcEwwVlZac0lPNm5hZlNwUjlROUxqcVM3amdLNmtMejRjZHdzT0FUWVZTLzJGVm16SE5PUGQ1b1VoR2ROOUZ1VUJwMGQxdzZiWE1mTTZXOHdLZ0J5RWRiQWZoMEJCN0Q3Q3N2T1ovTkh0NmhrWmR1Zm56VmN2ZHowazF0a1dRSWNKRXF1dzZBa2lwNmNKZUhhVUVCQVF5TWtmOGlaTWtLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93683fbe-ee8c-412b-a03e-5fcad9378898", "record_id": "flaws_cloudtrail:0000532:93683fbe-ee8c-412b-a03e-5fcad9378898", "row_index": 532, "timestamp": "2018-07-12T15:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93683fbe-ee8c-412b-a03e-5fcad9378898", "eventTime": "2018-07-12T15:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3WHFXNGQwMytJNjRnL3Q5ZlBaRU1ZSG9hUFljcnRYWXdxSGF5anF2ZTl2TkhqZGRhZmdxMFFYMk45VjZyK21IL21aNmo3Sit2dk9LRTI2TzE0WFZwdXplNHFySU1sZHFEWGxvSlNNbzN6Zk12T0JrZlRDTUlZVUJwa2tRS2xyaFdPTkgwZ1VFMnBjM2V6NFBKelk5VWNFa0kxeVl0NWNSb3l3dzNZT3pqMlBCaFBqdmtoWnJUNE90MTluRytQM0RRYVlrIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6626bfc-952a-43eb-a96c-242fd62b0450", "record_id": "flaws_cloudtrail:0000533:b6626bfc-952a-43eb-a96c-242fd62b0450", "row_index": 533, "timestamp": "2018-07-12T15:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6626bfc-952a-43eb-a96c-242fd62b0450", "eventTime": "2018-07-12T15:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXVmZhL1VFcC95aEJXdUU5aFVtVkNDbk81VUpWaTh0MlRzWjdORThhanBQekl2U3V5UngxRm85T3B4NisvUkkxVWhMa1RtZzliRCtOWjZnc3F5K0FHT1p1N01xNnNSS3NoSStJRWl5WFJ1QXhZaXFod3gyVjRaYXZFTXlLaUJzeHZUZ2lhT0NhYVRvbmtVTWt5V0pzeEFQdXpPZ3BXREQ3cTlDTnlsNFFHdWVHNnFYRjRxeFhuZmU5WmdWWW9XYitDOUJMIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa1b61b-1349-4869-ac48-2e21a605580c8", "record_id": "flaws_cloudtrail:0000534:daa1b61b-1349-4869-ac48-2e21a605580c8", "row_index": 534, "timestamp": "2018-07-12T15:21:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa1b61b-1349-4869-ac48-2e21a605580c8", "eventTime": "2018-07-12T15:21:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYRGEzSmlaeXlLYkVKVXRTbGJjRVNTYk5ZeUJVMWNKdG1mY21qaTdLZzNEZEdQQ3AyRC80bWVmZTByTStNejVnVWY3ZktBUncvdVV0c3YwbVRxbFo3bWxnYktNSmFsOEFHblh3QXFpM3BIRUhvNlowaDZLWHdqdjZ2dTYxRHlKaTZtYVoySi9tenhRMk5UVkE1ckxWOWhpa0JROHFEM05EK1M5L1E1U2l6Q0wreXZOWW1pNTUrcHFlcHBDYXBoNklZaHoxIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59e15c99-c117-4ba4-af45-a15a287f56da", "record_id": "flaws_cloudtrail:0000535:59e15c99-c117-4ba4-af45-a15a287f56da", "row_index": 535, "timestamp": "2018-07-12T15:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59e15c99-c117-4ba4-af45-a15a287f56da", "eventTime": "2018-07-12T15:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjZUJFMTZmT2hkWGx5ckwyd0Q4TXlnY29oNTdlaHFMc0lkWG03VUh4SGczTFE4YW5ob0Q4UmRpYkhrNDZwNmpwcGlBMW95UWZZODBKSGFNcTlOd2cxQzhucUZHQ3dDOUxBdkVwellDN2hmRlh3NWNXZnAyT25iMFp5aDMwRFNYM1Z0Q3hyWWFGYXg4ZlF0TzdTVHR3VXQ1TE83ejJ6NGZ3SnZFVXRqcWRWZkYrL0lFTE5jUGVSTm82MnUzelp0M3BYVWFyIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ad0a48-4d30-4b6b-98bb-da49e8b30692", "record_id": "flaws_cloudtrail:0000536:61ad0a48-4d30-4b6b-98bb-da49e8b30692", "row_index": 536, "timestamp": "2018-07-12T15:21:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ad0a48-4d30-4b6b-98bb-da49e8b30692", "eventTime": "2018-07-12T15:21:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1MUV1UTYxN2pldUZIeWUxYXM2dHNsVFlWNjlTSHRhTDIwNWM5VHh4UmNpbzZPNVBpd0R4MWltc01ZM2laUFd6KzJqK2xqVm9ubmZYc0NiVXordHRpMGtPaXFUNmREMGVtQmJLTllialMwOGpYYWRmOGMvdzJEQTVBZmF3OGFLS1VuSWtiajBHMVZEdnJUZXpmalE5amRZZkRNdjVwWGZOYnBDTDc0VTBhZkxKVWhPRTUzR2FEbGp1ZytrV09hbmRvZ0Zud1JoeTRtYTZmVFRhdktlbmdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c057005-db32-4c5a-aff1-8c2adcbc5dca", "record_id": "flaws_cloudtrail:0000537:c057005-db32-4c5a-aff1-8c2adcbc5dca", "row_index": 537, "timestamp": "2018-07-12T15:21:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c057005-db32-4c5a-aff1-8c2adcbc5dca", "eventTime": "2018-07-12T15:21:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsd0J4dHVBekQ1cDdoNHFyWDJZT1NrUFBRektwOCtqUGxVMzlhZ1ZZM3RVWlo2Mlpia0tGcVVKTUpBM1NzMmR6Q2NkZzVwZ1haM2dCeWhIeDU5cGlnenp6UEp6NlY0U201d1UxWUlJU3ZGbXZpR29sWE9Nc0wzd1hvWU9INzRIdHd5RkN4LzZHbU5URUV6bUFlRXp6V1VxSGZPRjB1VUxzM1B3ZkhJSHFpNGFCSk8zY3BEMTllSDY5UGF1ZG05U0sydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23b4a0d4-92c7-47d2-a4b8-b3d5a942017", "record_id": "flaws_cloudtrail:0000538:23b4a0d4-92c7-47d2-a4b8-b3d5a942017", "row_index": 538, "timestamp": "2018-07-12T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23b4a0d4-92c7-47d2-a4b8-b3d5a942017", "eventTime": "2018-07-12T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4MElJZE5hQ3czeitFNEh1cFp0cDJBZEpyZUl2b1lwV1hScTNMMjg1UXhnaFV6S3UrY0pzNVhEcVBaQjh4a0hMd0ZiL0VwRGh6dnorMTlXelNkMEZ0N21sY2hJL1RIUmY3emx6cVJ3QytZUzdxL21TcWtwMGttSUdXRVhHZlpmT04wclJ2aXRHbjdNQ25ITFBqdXpTaHhjWWJIODBFVytPQ2dieUVsTXdyaHp1a0NVRURKL3BtMkZTY1lZMWRnRDRrQWkwdTduc01mcGJZdy85TnluZzZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad62e13e-77fd-4620-b9d8-428ea9b036998", "record_id": "flaws_cloudtrail:0000539:ad62e13e-77fd-4620-b9d8-428ea9b036998", "row_index": 539, "timestamp": "2018-07-12T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad62e13e-77fd-4620-b9d8-428ea9b036998", "eventTime": "2018-07-12T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2Ykx3QXVkcERnMXJSZGZua3YvaVJHRHU3WHBZWitKOExBTnQyQ1gvY0laeDFHS0V5a3l3YTA1cGxRekcwUUl0L3d3eTUzOGRsT01QUTFSVmN4aC9od0xsR1U3T1ZwR1RtSnBIMWZDeTlrdmIzNnZpUmJhNUFrVXVlQkFoYS9BTExYdnBNekxxc01KRXRZOCthNTBFcTgxb0UyY0hpdXFnNjhJd21ySEdJRUt1TjhkTm9xeGgxSHZOd09WMXpXSVVwbFJ2RFN2aGQxYUVrSXhPdVdoRmFnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8beb4ec7-0277-4ee5-98dc-124af5d15287", "record_id": "flaws_cloudtrail:0000540:8beb4ec7-0277-4ee5-98dc-124af5d15287", "row_index": 540, "timestamp": "2018-07-12T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8beb4ec7-0277-4ee5-98dc-124af5d15287", "eventTime": "2018-07-12T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0clpjUWtrRElFMHA3aXZwR3p2TFBBRUpmM3hxblNYSG9Ma205dE9IVG1UYjh6R2pJZzIxUmVpQllBSVdTWjQzWEx4TmUvWU5hK1FpY09zQ2l5SkhvNEU3MS9XcHNhRkNHVzl5L1NGaW12SHprK0pYZXk0bUdUM0ZHdWM3UHpZY2J6bzVUVk1FMWhzMzV4WTI4QnZGWWNqVGhHMGErYlRKMHM0K0o4ZE9ZdnhyQlFEVTc2dm02cG9ZbnhPUDVGY3kwM1dlVzh1aUdmTS9NVVpPaVllMmZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b248d4ac-2eea-4b88-9696-14e5edd21cbc", "record_id": "flaws_cloudtrail:0000541:b248d4ac-2eea-4b88-9696-14e5edd21cbc", "row_index": 541, "timestamp": "2018-07-12T15:21:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b248d4ac-2eea-4b88-9696-14e5edd21cbc", "eventTime": "2018-07-12T15:21:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxL2tJLzZ2TFZvMjJsUnd2M3QybDhNejdKTU9xY2ROT00xcEp1NWZ2L3dRMzF0eVB2VHF0dk9NdUtUOWpPaEh1N2tzcDNBdnBUdHQrZG1JQ09KT2hId1hscWlkMkdURHJDNmJDZGhac2IrNUxoRVlFWG9qQ2ppNEN4a0MvckpQVkExTUtMZ0ZzRm44NlZ1WjI1ekcwWW5YaTdPRmJYTytwOUV6WEVRSGlKZ2NxRXpoZU1KVitvVU93M2lETkhDNUxWSVBLVkR5VHlIYWpTYnNacWptdkV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "212f8aed-ac1d-4673-bd9a-6915b700ec19", "record_id": "flaws_cloudtrail:0000542:212f8aed-ac1d-4673-bd9a-6915b700ec19", "row_index": 542, "timestamp": "2018-07-12T15:23:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "212f8aed-ac1d-4673-bd9a-6915b700ec19", "eventTime": "2018-07-12T15:23:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63265e32-545d-4bdb-b00c-e9f5a5157d06", "record_id": "flaws_cloudtrail:0000543:63265e32-545d-4bdb-b00c-e9f5a5157d06", "row_index": 543, "timestamp": "2018-07-12T15:24:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63265e32-545d-4bdb-b00c-e9f5a5157d06", "eventTime": "2018-07-12T15:24:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26650f29-6883-419c-b7bd-340ded6ab1ff", "record_id": "flaws_cloudtrail:0000544:26650f29-6883-419c-b7bd-340ded6ab1ff", "row_index": 544, "timestamp": "2018-07-12T15:26:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26650f29-6883-419c-b7bd-340ded6ab1ff", "eventTime": "2018-07-12T15:26:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a2c1b06-b013-44cc-8dbb-e7ff86ef28a2", "record_id": "flaws_cloudtrail:0000545:8a2c1b06-b013-44cc-8dbb-e7ff86ef28a2", "row_index": 545, "timestamp": "2018-07-12T15:27:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a2c1b06-b013-44cc-8dbb-e7ff86ef28a2", "eventTime": "2018-07-12T15:27:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef63149-3b0c-49e3-82f7-65ccce980892", "record_id": "flaws_cloudtrail:0000546:ef63149-3b0c-49e3-82f7-65ccce980892", "row_index": 546, "timestamp": "2018-07-12T15:28:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef63149-3b0c-49e3-82f7-65ccce980892", "eventTime": "2018-07-12T15:28:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcff47ec-052a-499a-a77c-ffb6668d784e", "record_id": "flaws_cloudtrail:0000547:fcff47ec-052a-499a-a77c-ffb6668d784e", "row_index": 547, "timestamp": "2018-07-12T15:28:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcff47ec-052a-499a-a77c-ffb6668d784e", "eventTime": "2018-07-12T15:28:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSdG9zREJVZ0xnMHhQQllJb2hOQTNIcUZzWEp4M1hQejhqeVpuR2w4Y2dkRS9qeFc4N28xMWFHQndNNzhxYlZtVzRGYk40eWF0dE9vNFkwYWRnUDRlWVpVSHV6SUhLNE5pUC9KWHhwQXJQblBhUllidFhoUGRGdS8zUWhlcmpqSG5EVjk2OHhZVkJ0UEVJTnM5Nnp6UFVwNHpEaEhQeFRrSXdGZDdHOHBId1ArbktsWGg3YVRvM0hUWGxYMXFJcHF1aHZKIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2191ae51-3c54-4bda-a7a3-2a42e747549c", "record_id": "flaws_cloudtrail:0000548:2191ae51-3c54-4bda-a7a3-2a42e747549c", "row_index": 548, "timestamp": "2018-07-12T15:28:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2191ae51-3c54-4bda-a7a3-2a42e747549c", "eventTime": "2018-07-12T15:28:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4dzRTcVFLekJxQlppMWN0TTZwc0tUWkRveUJpWW5UL25GanpOK3pmRmJZN0RNSEJSK3NzaGFlK2pjanFMcEh4TjhZYjRmMDh3VVY4WTJSWVZQS09CYStZbXowM3lnTS80d3hZUHk5WVBDODhDeS8xcTgzZ3hnZzdIcXY0c1AwK3ZHSC9tY0lRNjEzcjR0Q3dVSkM0YU9WZ1JsNU41Q3I0R2dCWW1tcExxZjhBdTkyaW95eWc0ZDJVUG9DNld6TE5WYjdWIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91e15640-5ca3-4776-a005-de61f0035b89", "record_id": "flaws_cloudtrail:0000549:91e15640-5ca3-4776-a005-de61f0035b89", "row_index": 549, "timestamp": "2018-07-12T15:28:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91e15640-5ca3-4776-a005-de61f0035b89", "eventTime": "2018-07-12T15:28:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqb2pqVmNuSUsxQnBMVlVjcGRmcThueHJsZ3pmd0R2ZkViRDU4SndrWHNOcWtraExqWU9JQ1h2aytaM0l1TTY0TE1oM2NKNXdIc1pJcjF1dXAydGUzNHE5MmgyNEdqck5IcjdreERnK2Mzdmlpd0lBcmZsdkErL3dXa1VGb0dwUk5EaTNGK2FEQmt5QWFVTEMxYlpia3pGR3BWTnZQMmVtZnIwaUF3M3owdTYzYnJjSHZWdVZLaWVVUXR4SU1SMm82UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "584c1de8-5f00-499c-90cf-16f20bccaa3a", "record_id": "flaws_cloudtrail:0000550:584c1de8-5f00-499c-90cf-16f20bccaa3a", "row_index": 550, "timestamp": "2018-07-12T15:28:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "584c1de8-5f00-499c-90cf-16f20bccaa3a", "eventTime": "2018-07-12T15:28:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvbHhWeWZjeFhiUmtkNFhSRUZHNGRrVXR5ZHVMdHVFMkxxRkhGMFJHVGRyYytNMGJpUitZc2ROTzNvL1Qxam1Fc0pWUFdTWnpKRUdIQWhlT2xYMmR3c2F4c1Njem9OMDAzU2NYTGQxaU41amxiQXJVREg4YmlYTTQ1TUwvU0NwTzhXZzh4ZXRRUzhucmhHcTRCS0tyMmhCK1BONmdDYVBsQ2R5UElnT1NKWmwzL1NQRGNISVlTYWJiKzhTbFQrNkciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b002d725-d41d-4b41-bc63-e37fb75a4082", "record_id": "flaws_cloudtrail:0000551:b002d725-d41d-4b41-bc63-e37fb75a4082", "row_index": 551, "timestamp": "2018-07-12T15:28:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b002d725-d41d-4b41-bc63-e37fb75a4082", "eventTime": "2018-07-12T15:28:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRT0E0UWFMQzh2dTl2UndLeVhsM3U4TkY3RkxSVFBBMDFGRGdxaWUxUEF0cklWTTdtV0MzcURRUkppYWxJdmxzc1Q2OXhlaEVDYTZ6cmpiaERaMmJCYlJoSVBGYzlHWmp5dkZJanNEeHYySUx6WHN0bkJIa1dlcTFjcDdiMEZDa3VvNlZ6Z2t6R2xXMVRmeWZxQTdDaWN5WXZOWTlCak93d2s5akY5aC92a1MzUHFjZFhWRzdMV29oRm9QMno5TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0242b713-8bc5-4dad-9642-887e929333e0", "record_id": "flaws_cloudtrail:0000552:0242b713-8bc5-4dad-9642-887e929333e0", "row_index": 552, "timestamp": "2018-07-12T15:28:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0242b713-8bc5-4dad-9642-887e929333e0", "eventTime": "2018-07-12T15:28:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtYi90b0l3c2RHcmJ2M3ZObkhNS0FYKzRxM1doYkpjSWFPQ282YXlyUlBlZGJJSjVVTDBaSi9reFdFWmh1VlZ2NVkreDlleGthUEJob2xROERIcFNWLzc3cE13UjNIUFhyMDFJUUxFV3FLSGtKbDBlL1hzQ1g4SnFNVXJpdUROVlBWTG94eXgva2t5YkpVb0djTEU2cU9YVTcrMG5hVlFGQVpwbUw2MnNHZE9nQkV0VGpzdDcvUmN2QWd4VVlpWE1wZzNlIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565eac0d-bd12-4c9a-8558-f33112a9075", "record_id": "flaws_cloudtrail:0000553:565eac0d-bd12-4c9a-8558-f33112a9075", "row_index": 553, "timestamp": "2018-07-12T15:28:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565eac0d-bd12-4c9a-8558-f33112a9075", "eventTime": "2018-07-12T15:28:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4cWdrTlZvUXBPVVZVUGJCdUdmZXoyMnVLcUtzV3AxYUJPdUdEMUY4UzZxL0lxZFpOcjBRbmJLV3NKc2NDVjZOVXhHWFFZelBtcmpyVGRDdDVhbFljZjVaVlIwQUlaZXhiWnVpa3lGM1ZERThFSEdxRDhsQjdiU0NFdnhJNFRpT05CUjkyVkdxazNIT1l5MlBGWU9lL2hvWHQxTVZ3M1ZEM0NnUlZUMmlUdnJIZ2lWcWFnbzNhRkJVU3NKNFRxMWkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f7ebbfc-7ce4-479c-9713-143e6a3ee7a5", "record_id": "flaws_cloudtrail:0000554:6f7ebbfc-7ce4-479c-9713-143e6a3ee7a5", "row_index": 554, "timestamp": "2018-07-12T15:28:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f7ebbfc-7ce4-479c-9713-143e6a3ee7a5", "eventTime": "2018-07-12T15:28:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoMW1wNmhhZDc4em1hWVFqYUkzbHI2SVFLVEplZTVRa3Vsa2UzMjRjWVpUWjk3V2trNVg2ajQzVUNZUVptd09IWVI3bUJwZTl2ZVlEK0hHVTJPL2dWV3VGT2x3UWlDRVRCWmJ3SmdIVWdjdzlOc0M3TDMwV3BVWTJCTzcrbnF6RFlSOTdTL0RGamU4QnNIeTRtSzQxOEdWRXNXK2xwU01iNm1TMC9xY1ViWk9WKzlpMWNSbnZFY0hvdis0QkFacUtPbVlVIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519c6c09-3d53-4931-8f77-7a704897b1dd", "record_id": "flaws_cloudtrail:0000555:519c6c09-3d53-4931-8f77-7a704897b1dd", "row_index": 555, "timestamp": "2018-07-12T15:28:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519c6c09-3d53-4931-8f77-7a704897b1dd", "eventTime": "2018-07-12T15:28:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBamNOUGJCRmFRZ25wcHpmTmlzTlBWQVR3bGpUdDJwd0htaXhzZFgzZlhreW1FcU5wUGFyNlYvQmVHMm11MFU0Um9IQ0FkZ2NIVTVNNjhoQWE3Tyt0TWVhRHRyVFF0bytiWHl5YlQwMmFSOWhhUjJrd0RuS01jMTgxSUp3TTJ1TE1kRHVTOGY3WWlZYkVIYUJBZjM5NFIvU1o1cW5hOUNkaVdIUUJHVE4yWFpHOEZyOEQyK1E4U0pGcHJHdUEzOW0wb0ZyIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1735b4-39aa-4e17-a1dd-e000495c8475", "record_id": "flaws_cloudtrail:0000556:ab1735b4-39aa-4e17-a1dd-e000495c8475", "row_index": 556, "timestamp": "2018-07-12T15:28:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1735b4-39aa-4e17-a1dd-e000495c8475", "eventTime": "2018-07-12T15:28:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSYytUU2tiWXdHTVNZeHdxNHV4OXVmSmdVZWRNMnBLVmRXZTVjWjhidHZ3OHJ0cURiejBlZ3hreHVRUzZ5L0h5b3g2R0x5b25MdG92eVAxSGlZNkh5Y0phL3Y2YW9xN1pqUG1ITjFSSU5UeWptV21WVVpaWEp0U2FPaEpXeXZHKzExUXpVdjEwSGNFaVBvVkZ1a2hzdEs1QUhseFRJRmp3Y3VBYzU2djZlODZYSXY3aUFxaEgrQnVoYmpadmxhNFRkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b4869f0-4de5-42d4-a835-c23ca664b97e", "record_id": "flaws_cloudtrail:0000557:1b4869f0-4de5-42d4-a835-c23ca664b97e", "row_index": 557, "timestamp": "2018-07-12T15:28:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b4869f0-4de5-42d4-a835-c23ca664b97e", "eventTime": "2018-07-12T15:28:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOaVI0aHJJenBZN1d3eDlwL09XWmtESDdKK0h6MTJxclpnL2RmRzV4V2wyZlViUGdlYTJ2RmxGUmFpMjFKbGVtU0JqYU5kU0VKaVVkUzNJeFY1SUpRMmpudFhFYzc0SUhzNnJaV3BaMXhjZDJZMFdaRVZmOW5pcHBKWitzalhBcGRReFNBb3htOHE5MSt1N3VYcERsY2xMWXg4aG5TUkZPc3BoSmZQV3JVRDE5UWtoQnhGUFptSmtxTklMdUg1cEt5RzQzIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "518243d79-b96f-477f-be47-f841c977b1a1", "record_id": "flaws_cloudtrail:0000558:518243d79-b96f-477f-be47-f841c977b1a1", "row_index": 558, "timestamp": "2018-07-12T15:28:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "518243d79-b96f-477f-be47-f841c977b1a1", "eventTime": "2018-07-12T15:28:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxR3FNOUlCbzBhVUtkRC94VWQyS3ZMbmJGL2p0dlpSYU5QNXAyRXV3aTByZUgwOEltUW96OHBwVmZnWXFGQktrMG1jUFJpUDg4WC9QeW4xZEtDRTRMQnZkSE9uYmhiemFqYTgrR08ybkplRTVKbFNzWkZaVWJCdTFkMjl5eVlyOHlJcGg2elRVUHFUaUpiaWFXZVdBTGwxdkszNVpieW5RZWJheUVXNWQ0N0FRcFVHUGZPN2RqZGQ3RXR1MGdGTDlpWjc5IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c5218c2-5787-4b24-bc2c-9e89ef220502", "record_id": "flaws_cloudtrail:0000559:7c5218c2-5787-4b24-bc2c-9e89ef220502", "row_index": 559, "timestamp": "2018-07-12T15:28:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c5218c2-5787-4b24-bc2c-9e89ef220502", "eventTime": "2018-07-12T15:28:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyc0o0bm1KRG80bGE0bi9ycmEyYnZJbDNaN1M2TUxuMk5KWWdyc2ZCcHJNbHdkbDVOZ252NUtrUE5nWUVUNHlkd3pSYmlDcnhmMWloVUtxdFUwVEZSQjJNWUNTVk9BNThHbjAyeVNBR1NTa0ZINU9BM2ZqenQ2VTJzckFVVlJzRzkvZmZnNFVyeW9pL3FpTlh2L2p6amF6aUNRNG5QZWVJSG4xdlJVVGZmMFJYb2V4bVp6dU1rQ2FCcmxkVXJoWXdSQ05xIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2bb6fe5-757c-411f-ad63-b101496c530b", "record_id": "flaws_cloudtrail:0000560:d2bb6fe5-757c-411f-ad63-b101496c530b", "row_index": 560, "timestamp": "2018-07-12T15:28:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2bb6fe5-757c-411f-ad63-b101496c530b", "eventTime": "2018-07-12T15:28:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4VlNhSkFZRzNialdlSTRodzIxZ1QzWVBXOVcxMDhFNy9oVytFSGRkSGtCTkxMZUJFclFmY1JqNDBPa0VrbEd6Zk5CZ01IREdwbDMvNjZnRHhCSndsRk1UZ0ZUVzVZbVJLTllZaWlRMUdZYzlwTS9PYkVsM3NjeERmTCtRekFTTUtybTlua25HRXZKR3JoSktPNkt3bTZNVEZBSUlhOGh2bmgyRjlvNWUxNFJ5eEluU2Q3ZGFFYlJicmViY294L1pFTkQ4IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef81d377-b9cd-4b31-bf9b-faa9f59c222f", "record_id": "flaws_cloudtrail:0000561:ef81d377-b9cd-4b31-bf9b-faa9f59c222f", "row_index": 561, "timestamp": "2018-07-12T15:28:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef81d377-b9cd-4b31-bf9b-faa9f59c222f", "eventTime": "2018-07-12T15:28:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4L3V6d2w4VDhBYTh2YWNHVDMrR0F2S2JsQytlQjJqTzNQQ3ExcUVzbVhad2syR3gvRC9xaTVDeGJQL2ZKWXRsOVhvUXltL1BQSlJXUDJtTWRWZGVqbUFYNTlKVVYxalZ1WlVTL3J2a0dVTmR4eDJTSVdYNmFEemcxOVo5dkQwQVlVUFRGNzdxNEc5NlpBL3NjNjRhU2h0L2g1dGJwODlqekVYdERuakU0ZTdFT29OcXVWbGNBekFScXBZNWpSRndpQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bb117b3-aadc-4ee7-b179-74f0b038fcd1", "record_id": "flaws_cloudtrail:0000562:4bb117b3-aadc-4ee7-b179-74f0b038fcd1", "row_index": 562, "timestamp": "2018-07-12T15:28:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bb117b3-aadc-4ee7-b179-74f0b038fcd1", "eventTime": "2018-07-12T15:28:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVVDdKV2trUDkyTWtOWFJjMmZ6dlhaais4dUtiOGdqenpnZU8zTWIzTHlRbTVsNGVhUXYwU2ZnN3VSSkFFN2g0eTRtdjlITGN4T1dTczFHRHdpWm1BSDdCbEp5OGY5cUw0U1RWSjIvMnNSb1R6NW5TcG00STJ0K1RONGRyOG9vbVFVMWY5dUpkMFFtRU5PWC94YUZhckMxNEhFSlBpNFRvcmx4dXF3bTlrc1F2TDlVc0JYQ0Vaem9yWWJwL1crU3g1WkZzYTRhUE1rbmwzZGdTRkpXNDh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ed75cd2-f6e9-48c9-ab45-837932db68", "record_id": "flaws_cloudtrail:0000563:3ed75cd2-f6e9-48c9-ab45-837932db68", "row_index": 563, "timestamp": "2018-07-12T15:28:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ed75cd2-f6e9-48c9-ab45-837932db68", "eventTime": "2018-07-12T15:28:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHT1VPeTJYS0dtUlBzZnkwajlPendhZ0pzN2FVRGNSMEl3RjdhbFczT09QeHNZMytpZndCMkpjMFBWWDM0Nys0RElwRzlvMlB3enJhenBSQjBFbzNzSnp3MFZIOWV2YXR4UWUyUFhKZVkyUVlyUE02ODJkU0N1Y295ckZtTUxUYnl3MGpEWUtvR1dWbExDRXFSL1RPQzBxYm5YWXVpTHN0QklZQTIvdmgyRVF2UGVsUFc0RlQrT0gzNHhRUTZmWk94anM4a0ZKbVl1dlNodk11eHNtV0F3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d286a6eb-b543-48d9-bae4-19cc06fc5c72", "record_id": "flaws_cloudtrail:0000564:d286a6eb-b543-48d9-bae4-19cc06fc5c72", "row_index": 564, "timestamp": "2018-07-12T15:28:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d286a6eb-b543-48d9-bae4-19cc06fc5c72", "eventTime": "2018-07-12T15:28:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0aGRPUjBLd2lyRDNGdnE3cXY4azl6dGttUThmU05UQitHN00vdzFLaFVMNkRHYXRqUnJtcmRKdFAvU0I3Q2srQnRNSjR2ZHMwMTdMZm94cTFsT3o1d1haZDI2bmp0bGJZMlJEMDh1L2x1VEZhd0dEUExpTFY3QjliSitsTUFhVkh1SnY0WGc4RG9zYzZPeFVIQURhYVF1NTlLOTdnWC9HdytXL0dWeGpNazY4VUEwenNsUXJJekd4b0ZzNlNNTDNHWkRSbU5NZzZQYk9LYkEzbEErcnJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78645-186c-41ff-9180-5c3cb74a0fea", "record_id": "flaws_cloudtrail:0000565:78645-186c-41ff-9180-5c3cb74a0fea", "row_index": 565, "timestamp": "2018-07-12T15:28:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78645-186c-41ff-9180-5c3cb74a0fea", "eventTime": "2018-07-12T15:28:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJd1hNVDlQWnRXYTFGbkViSGtvbG16RFhUZlJ2Z1k2QUtoMlZ1S0xsVWc4UUdENDBGOEppU3QrMFZodkFUamFlZFlkR2pwZWRJNUhwVHRMSUZ1T1V5UHBxSStqZ25RY0hQZWlqZWRpbkhZbU5ESTVIamJtVTNZeW5sTmdqUHg0K3BXRHRVN1gvYWs2NEdVa3RsTW55UUt1RkpIUFNtWVRObnJQMVRUZzFmUXhBVldJOEpOUkpTM21WVWJxNFlsR1BGRzh0SUFERUZGL0lQajlGMS84M1BBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "671841-f23b-4e52-bbb8-22be8b30a11b", "record_id": "flaws_cloudtrail:0000566:671841-f23b-4e52-bbb8-22be8b30a11b", "row_index": 566, "timestamp": "2018-07-12T15:28:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "671841-f23b-4e52-bbb8-22be8b30a11b", "eventTime": "2018-07-12T15:28:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNUpRc1JYdEdVZE5SSDJnV05ha0hyN3BOMVVzaHRJT0NVVUVlSmZ3R3gxMHM3Z3lXdmIydGhhdDl1SmpjcFk5MWtaamRhUUVVSUgrZjJGQll6MzMrMTloTE9rRy9xbnZnRGdKTDF2SFlMWllBSloyYnpEdDVOTm9xMGtxeXI1ZTJmejZhSkhCUFZNeE81NDN3aEhyakM4MW1oU2VZOW1ZWmlaZlhkcURzb0d4V1J2NW05aHd2NUpVZC9VRVhGSjc0MS9TcjU5R25KUVMybjFROGU2RytRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15a188c4-a223-447e-a59e-1b053a3679f1", "record_id": "flaws_cloudtrail:0000567:15a188c4-a223-447e-a59e-1b053a3679f1", "row_index": 567, "timestamp": "2018-07-12T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.91.40.203", "user_agent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15a188c4-a223-447e-a59e-1b053a3679f1", "eventTime": "2018-07-12T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.91.40.203", "userAgent": "aws-cli/1.15.56 Python/2.7.9 Windows/8 botocore/1.10.55", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a8cc288-275e-487f-8800-796b002312", "record_id": "flaws_cloudtrail:0000568:9a8cc288-275e-487f-8800-796b002312", "row_index": 568, "timestamp": "2018-07-12T15:38:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a8cc288-275e-487f-8800-796b002312", "eventTime": "2018-07-12T15:38:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7771a72-8f77-4dcb-9560-af822ca50f4d", "record_id": "flaws_cloudtrail:0000569:e7771a72-8f77-4dcb-9560-af822ca50f4d", "row_index": 569, "timestamp": "2018-07-12T15:40:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7771a72-8f77-4dcb-9560-af822ca50f4d", "eventTime": "2018-07-12T15:40:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb2f5506-8899-42dc-91a5-6a203ee02ce5", "record_id": "flaws_cloudtrail:0000570:fb2f5506-8899-42dc-91a5-6a203ee02ce5", "row_index": 570, "timestamp": "2018-07-12T15:55:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb2f5506-8899-42dc-91a5-6a203ee02ce5", "eventTime": "2018-07-12T15:55:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1CDNVOED17T7M95T", "expiration": "Jul 12, 2018 10:12:58 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305f38ea-bb6b-43dd-84d6-f96d2856c83f", "record_id": "flaws_cloudtrail:0000571:305f38ea-bb6b-43dd-84d6-f96d2856c83f", "row_index": 571, "timestamp": "2018-07-12T16:26:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305f38ea-bb6b-43dd-84d6-f96d2856c83f", "eventTime": "2018-07-12T16:26:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6652bb6-c62e-4542-9b2c-052eb584f3e3", "record_id": "flaws_cloudtrail:0000572:a6652bb6-c62e-4542-9b2c-052eb584f3e3", "row_index": 572, "timestamp": "2018-07-12T16:29:10Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6652bb6-c62e-4542-9b2c-052eb584f3e3", "eventTime": "2018-07-12T16:29:10Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47d5001b-63e3-45c2-9da8-a1df196c36da", "record_id": "flaws_cloudtrail:0000573:47d5001b-63e3-45c2-9da8-a1df196c36da", "row_index": 573, "timestamp": "2018-07-12T16:31:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47d5001b-63e3-45c2-9da8-a1df196c36da", "eventTime": "2018-07-12T16:31:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c2bf12-ec1a-4c6a-adda-d71d45887470", "record_id": "flaws_cloudtrail:0000574:c7c2bf12-ec1a-4c6a-adda-d71d45887470", "row_index": 574, "timestamp": "2018-07-12T16:39:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c2bf12-ec1a-4c6a-adda-d71d45887470", "eventTime": "2018-07-12T16:39:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63c38b1-0ee7-4c51-a081-78728ddd", "record_id": "flaws_cloudtrail:0000575:a63c38b1-0ee7-4c51-a081-78728ddd", "row_index": 575, "timestamp": "2018-07-12T16:39:47Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63c38b1-0ee7-4c51-a081-78728ddd", "eventTime": "2018-07-12T16:39:47Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca4620dd-d3ec-49aa-ba48-b2e4b7b0c463", "record_id": "flaws_cloudtrail:0000576:ca4620dd-d3ec-49aa-ba48-b2e4b7b0c463", "row_index": 576, "timestamp": "2018-07-12T16:40:01Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca4620dd-d3ec-49aa-ba48-b2e4b7b0c463", "eventTime": "2018-07-12T16:40:01Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "831fd402-0286-42f2-8d7c-cad609247af0", "record_id": "flaws_cloudtrail:0000577:831fd402-0286-42f2-8d7c-cad609247af0", "row_index": 577, "timestamp": "2018-07-12T16:40:40Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "831fd402-0286-42f2-8d7c-cad609247af0", "eventTime": "2018-07-12T16:40:40Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15rc1 Linux/4.15.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bee4a5aa-a943-44ef-93d4-1f1207a82aa4", "record_id": "flaws_cloudtrail:0000578:bee4a5aa-a943-44ef-93d4-1f1207a82aa4", "row_index": 578, "timestamp": "2018-07-12T16:56:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bee4a5aa-a943-44ef-93d4-1f1207a82aa4", "eventTime": "2018-07-12T16:56:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPDULBXZFOWHW4TG6", "expiration": "Jul 12, 2018 11:22:38 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dc962a6-3c89-4234-aecd-030a500b74da", "record_id": "flaws_cloudtrail:0000579:2dc962a6-3c89-4234-aecd-030a500b74da", "row_index": 579, "timestamp": "2018-07-12T17:04:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-27"], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dc962a6-3c89-4234-aecd-030a500b74da", "eventTime": "2018-07-12T17:04:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-27", "roleSessionName": "reader-7935"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-27"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a89aa66c-373d-481e-b05f-36f3adc2f532", "record_id": "flaws_cloudtrail:0000580:a89aa66c-373d-481e-b05f-36f3adc2f532", "row_index": 580, "timestamp": "2018-07-12T17:06:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a89aa66c-373d-481e-b05f-36f3adc2f532", "eventTime": "2018-07-12T17:06:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c068a46c-9ac1-4daf-8247-7cf23585c008", "record_id": "flaws_cloudtrail:0000581:c068a46c-9ac1-4daf-8247-7cf23585c008", "row_index": 581, "timestamp": "2018-07-12T17:07:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 634, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c068a46c-9ac1-4daf-8247-7cf23585c008", "eventTime": "2018-07-12T17:07:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44c30911-2e1e-474c-8b62-8fb752799730", "record_id": "flaws_cloudtrail:0000582:44c30911-2e1e-474c-8b62-8fb752799730", "row_index": 582, "timestamp": "2018-07-12T17:07:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059-archive"], "raw_record_size_bytes": 650, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44c30911-2e1e-474c-8b62-8fb752799730", "eventTime": "2018-07-12T17:07:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c776d44f-b823-438c-9a9e-461acb9faa22", "record_id": "flaws_cloudtrail:0000583:c776d44f-b823-438c-9a9e-461acb9faa22", "row_index": 583, "timestamp": "2018-07-12T17:09:54Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c776d44f-b823-438c-9a9e-461acb9faa22", "eventTime": "2018-07-12T17:09:54Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4715d981-c51b-43c3-9ae6-e687dee89f33", "record_id": "flaws_cloudtrail:0000584:4715d981-c51b-43c3-9ae6-e687dee89f33", "row_index": 584, "timestamp": "2018-07-12T17:13:01Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4715d981-c51b-43c3-9ae6-e687dee89f33", "eventTime": "2018-07-12T17:13:01Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059", "key": "customer/08616.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f29105c-ea9e-46ab-b7fa-f345980cecf1", "record_id": "flaws_cloudtrail:0000585:1f29105c-ea9e-46ab-b7fa-f345980cecf1", "row_index": 585, "timestamp": "2018-07-12T17:13:18Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f29105c-ea9e-46ab-b7fa-f345980cecf1", "eventTime": "2018-07-12T17:13:18Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059", "key": "customer/06036.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbd2729d-a8e9-4516-b53b-b3215f6382a9", "record_id": "flaws_cloudtrail:0000586:cbd2729d-a8e9-4516-b53b-b3215f6382a9", "row_index": 586, "timestamp": "2018-07-12T17:13:49Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbd2729d-a8e9-4516-b53b-b3215f6382a9", "eventTime": "2018-07-12T17:13:49Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059", "key": "customer/06592.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec532ea7-583f-41f3-8f44-0378bdd08d8f", "record_id": "flaws_cloudtrail:0000587:ec532ea7-583f-41f3-8f44-0378bdd08d8f", "row_index": 587, "timestamp": "2018-07-12T17:14:41Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec532ea7-583f-41f3-8f44-0378bdd08d8f", "eventTime": "2018-07-12T17:14:41Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059", "key": "customer/05292.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7fe8a3f-63b4-4a07-af0d-10af5d9d6051", "record_id": "flaws_cloudtrail:0000588:f7fe8a3f-63b4-4a07-af0d-10af5d9d6051", "row_index": 588, "timestamp": "2018-07-12T17:15:21Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA55U8XSTEKIY4YBOT", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "173.101.155.155", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1059"], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7fe8a3f-63b4-4a07-af0d-10af5d9d6051", "eventTime": "2018-07-12T17:15:21Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "173.101.155.155", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA55U8XSTEKIY4YBOT", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-1059", "key": "customer/03919.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1059"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "386ee8d8-0066-4d4c-90c1-f396036ec", "record_id": "flaws_cloudtrail:0000589:386ee8d8-0066-4d4c-90c1-f396036ec", "row_index": 589, "timestamp": "2018-07-12T17:43:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1934, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "386ee8d8-0066-4d4c-90c1-f396036ec", "eventTime": "2018-07-12T17:43:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIALHDPHYKPEEWLPYIJ", "expiration": "Jul 12, 2018 6:43:17 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b01ae4d-aca4-4536-bbc0-f9bad4031de3", "record_id": "flaws_cloudtrail:0000590:9b01ae4d-aca4-4536-bbc0-f9bad4031de3", "row_index": 590, "timestamp": "2018-07-12T17:56:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b01ae4d-aca4-4536-bbc0-f9bad4031de3", "eventTime": "2018-07-12T17:56:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXIIRKCQT2PMRJL1X", "expiration": "Jul 13, 2018 12:09:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399832-bfc3-4252-89e1-682b479c1c0b", "record_id": "flaws_cloudtrail:0000591:399832-bfc3-4252-89e1-682b479c1c0b", "row_index": 591, "timestamp": "2018-07-12T18:56:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399832-bfc3-4252-89e1-682b479c1c0b", "eventTime": "2018-07-12T18:56:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAINZ0YNDTZ9BP4YA1", "expiration": "Jul 13, 2018 1:29:49 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12341ee-d672-45e8-8f8d-4675a4700e01", "record_id": "flaws_cloudtrail:0000592:12341ee-d672-45e8-8f8d-4675a4700e01", "row_index": 592, "timestamp": "2018-07-12T19:56:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1475, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12341ee-d672-45e8-8f8d-4675a4700e01", "eventTime": "2018-07-12T19:56:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW9AWC68GJHJ6PZNZ", "expiration": "Jul 13, 2018 2:06:34 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2d4a45-55d1-495c-b37e-5d827a7646ae", "record_id": "flaws_cloudtrail:0000593:cc2d4a45-55d1-495c-b37e-5d827a7646ae", "row_index": 593, "timestamp": "2018-07-12T20:57:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2d4a45-55d1-495c-b37e-5d827a7646ae", "eventTime": "2018-07-12T20:57:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM4M3U9RGK1DL9UIR", "expiration": "Jul 13, 2018 3:25:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2000ca0-5f04-4ff1-beaf-e780b6e974d9", "record_id": "flaws_cloudtrail:0000594:f2000ca0-5f04-4ff1-beaf-e780b6e974d9", "row_index": 594, "timestamp": "2018-07-12T21:57:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2000ca0-5f04-4ff1-beaf-e780b6e974d9", "eventTime": "2018-07-12T21:57:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3YD7E727AD0BV7A8", "expiration": "Jul 13, 2018 4:17:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0722fb1-41a1-4e55-8b15-e814819eecf9a", "record_id": "flaws_cloudtrail:0000595:c0722fb1-41a1-4e55-8b15-e814819eecf9a", "row_index": 595, "timestamp": "2018-07-12T22:58:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0722fb1-41a1-4e55-8b15-e814819eecf9a", "eventTime": "2018-07-12T22:58:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS8B96GH146U8C3IA", "expiration": "Jul 13, 2018 5:21:22 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa4931e6-d4f9-4f4b-9bb4-0a69fa1cbac2", "record_id": "flaws_cloudtrail:0000596:aa4931e6-d4f9-4f4b-9bb4-0a69fa1cbac2", "row_index": 596, "timestamp": "2018-07-12T23:02:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAS8B96GH146U8C3IA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa4931e6-d4f9-4f4b-9bb4-0a69fa1cbac2", "eventTime": "2018-07-12T23:02:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAS8B96GH146U8C3IA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T22:58:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87a0dac-99e6-470d-8d71-9d84c19acdc7", "record_id": "flaws_cloudtrail:0000597:c87a0dac-99e6-470d-8d71-9d84c19acdc7", "row_index": 597, "timestamp": "2018-07-12T23:02:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAS8B96GH146U8C3IA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "250.251.253.3", "user_agent": "[aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87a0dac-99e6-470d-8d71-9d84c19acdc7", "eventTime": "2018-07-12T23:02:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "[aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAS8B96GH146U8C3IA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-12T22:58:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86bcf226-d770-44c3-864e-0467e36fdeaf", "record_id": "flaws_cloudtrail:0000598:86bcf226-d770-44c3-864e-0467e36fdeaf", "row_index": 598, "timestamp": "2018-07-12T23:43:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86bcf226-d770-44c3-864e-0467e36fdeaf", "eventTime": "2018-07-12T23:43:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIABB0NMY5BS6LV2QJ9", "expiration": "Jul 13, 2018 12:43:00 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f686b192-d517-468e-ae5a-0975da4d35e9", "record_id": "flaws_cloudtrail:0000599:f686b192-d517-468e-ae5a-0975da4d35e9", "row_index": 599, "timestamp": "2018-07-12T23:58:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f686b192-d517-468e-ae5a-0975da4d35e9", "eventTime": "2018-07-12T23:58:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0KOGR9WNCKRKZLZY", "expiration": "Jul 13, 2018 6:15:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02e467b4-9244-4521-8351-d8d83a83473", "record_id": "flaws_cloudtrail:0000600:02e467b4-9244-4521-8351-d8d83a83473", "row_index": 600, "timestamp": "2018-07-13T00:59:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02e467b4-9244-4521-8351-d8d83a83473", "eventTime": "2018-07-13T00:59:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANXR2F1ZZ3OR4ZYX7", "expiration": "Jul 13, 2018 7:11:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c2bfc70-f282-43f7-982b-3ab7a85785d2", "record_id": "flaws_cloudtrail:0000601:9c2bfc70-f282-43f7-982b-3ab7a85785d2", "row_index": 601, "timestamp": "2018-07-13T02:00:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1475, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c2bfc70-f282-43f7-982b-3ab7a85785d2", "eventTime": "2018-07-13T02:00:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA736X6VPQO4BKDK4E", "expiration": "Jul 13, 2018 8:35:26 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aade593-5fdb-439f-9e84-ff75c8e93e9c", "record_id": "flaws_cloudtrail:0000602:7aade593-5fdb-439f-9e84-ff75c8e93e9c", "row_index": 602, "timestamp": "2018-07-13T03:01:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aade593-5fdb-439f-9e84-ff75c8e93e9c", "eventTime": "2018-07-13T03:01:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANZWM948WTJTDUQ5S", "expiration": "Jul 13, 2018 9:01:52 AM", "sessionToken": "FQoDYXdzEFQaDMN6V1EHekBUJUy6pSK3Awh/iMee0oyM85ov0iWK4uH5UfUhK+K/LtxpsOL8/cOMlBe5AKjn1RdP2HU+zcomS0XnhCsIQPKxLa8zMTq8L2f+yZZv+uKv2WDFCX6AFXOZ8jauA7Acl6bYIdivbaZ9rykEUYOFs9OlEuYW7i4V0PVPezHH2C1pfo9FoCn5Snnrq6Qm1/AGOcphQRTOTfIGAkK37JjVEV1UrwCp9z8iExKYikbmxFLJvYVnpCf8AjHcxAzfaBcMIdjzwfbMaOpCfUC/Fl6UgBa29kEQH2wOQmEDOwcpi3baFPjdpBiWnnyHbAIjTX5h9QIVxp6qzH1a5XOPDoaobASlu17ueAlbb+yhEmG0YbFf7yRuU0uRna6hdfexOEqetVViwvZXCbdVjHlgIntOdKf7QTO93l6JYLJlS89ZdboSA3OowjPQNR74M9HDYf4cGe/ep8RcvVinK0qCbyEXa0/66PuVF8UEC1GeEsDIaf1fU6VicxBsKKnqeGPnlHuSb3XTD0SQnkQJrEheVEeVqdYbxKiAxk6nSztglV0wNzXueOO+A6WaoIkMeZoXuxOpMOGphEP3+y82uL6V6MsMpxsonqyg2gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8066e6e-f3d8-4ecc-a45a-0601def7ce05", "record_id": "flaws_cloudtrail:0000603:f8066e6e-f3d8-4ecc-a45a-0601def7ce05", "row_index": 603, "timestamp": "2018-07-13T04:01:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8066e6e-f3d8-4ecc-a45a-0601def7ce05", "eventTime": "2018-07-13T04:01:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASS9K9BZV7XDGO1JP", "expiration": "Jul 13, 2018 10:30:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af829cb1-d321-46ab-811c-009ab88e3446", "record_id": "flaws_cloudtrail:0000604:af829cb1-d321-46ab-811c-009ab88e3446", "row_index": 604, "timestamp": "2018-07-13T04:01:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af829cb1-d321-46ab-811c-009ab88e3446", "eventTime": "2018-07-13T04:01:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASS9K9BZV7XDGO1JP", "expiration": "Jul 13, 2018 10:30:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "690b4ba9-16bb-4a30-9f34-a19377c92b3", "record_id": "flaws_cloudtrail:0000605:690b4ba9-16bb-4a30-9f34-a19377c92b3", "row_index": 605, "timestamp": "2018-07-13T05:03:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "690b4ba9-16bb-4a30-9f34-a19377c92b3", "eventTime": "2018-07-13T05:03:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB39ODA6NMCEQYY98", "expiration": "Jul 13, 2018 11:20:28 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "952dd148-4f45-4c9a-8b0d-1cb40b03d4c8", "record_id": "flaws_cloudtrail:0000606:952dd148-4f45-4c9a-8b0d-1cb40b03d4c8", "row_index": 606, "timestamp": "2018-07-13T05:43:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "952dd148-4f45-4c9a-8b0d-1cb40b03d4c8", "eventTime": "2018-07-13T05:43:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS6WDD27GTY1UNXYT", "expiration": "Jul 13, 2018 6:43:25 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc3385cb-316a-4d64-bb9d-9c70ca2b2749", "record_id": "flaws_cloudtrail:0000607:dc3385cb-316a-4d64-bb9d-9c70ca2b2749", "row_index": 607, "timestamp": "2018-07-13T06:03:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc3385cb-316a-4d64-bb9d-9c70ca2b2749", "eventTime": "2018-07-13T06:03:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEGNGNGZUEDMROZ3H", "expiration": "Jul 13, 2018 12:17:27 PM", "sessionToken": "FQoDYXdzEFcaDA6h+gm9w9OOIZ/x/yK3Axn0rj0PuN8c2BkIJT1RG6Qplz6e0tLiWQDfl6f1+/EgRI2sBxc7hy1Lsz36rkrzXl6pWsw8RzDRayBSML9RRBkGPyW7BpjxYaRYTd6rpAqdQe7YNm2stA8Z5g9j+yenq2gzGDvSOhnMRu+JVnmFzlNCAr53WCvz6EhpmsLXXI+WBnmo45wb3kzsqxd3sFKvmSuvFJZm3ZIE/y93L3XESiNSHRvYY9euOZyZTMjcf9GAH+F/b74fiZk5B84HD3JPjieaRMPFjITvNIh0Lx0klNlO7FycW4CGELStLpXreudL+DiIgWeBGIwL7Yj8lTUGpIVTfuWs3qHI896KlgIPoWsj+ir3q2wDkGzeI748/O+cHaCuMPYCo3/4MMpr1ylia9bgy+goWRE9TqS11ntuN8d55TWlWAWw/OqIqZXni4McfWcDmUobmc9zsZOCun4Yx0iDPZowuzHRw9kAuwv+GlZjBz/9Cfai79ZvCl3FzhKEAhqrChHDsvO+OcR9hG/KbwNxofFkWnKGN6DSSUNt/6LrmGNcVe7gJSlL1DLF9K+UEk5At+RukPZdWwrcEb+650LXe60YDqkoyIGh2gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04a727ee-c018-496f-ae3c-d9b7064399d8", "record_id": "flaws_cloudtrail:0000608:04a727ee-c018-496f-ae3c-d9b7064399d8", "row_index": 608, "timestamp": "2018-07-13T07:04:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04a727ee-c018-496f-ae3c-d9b7064399d8", "eventTime": "2018-07-13T07:04:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU1C9W6NATLHFZFWN", "expiration": "Jul 13, 2018 1:08:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54ea44c8-9810-4721-b112-1e92879e2497", "record_id": "flaws_cloudtrail:0000609:54ea44c8-9810-4721-b112-1e92879e2497", "row_index": 609, "timestamp": "2018-07-13T08:05:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54ea44c8-9810-4721-b112-1e92879e2497", "eventTime": "2018-07-13T08:05:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG0Y5QAM2C2W2FMYO", "expiration": "Jul 13, 2018 2:16:01 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}