Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58385f6-aa38-4505-8bc2-1b3cfa6a0fa9", "record_id": "flaws_cloudtrail:0000000:58385f6-aa38-4505-8bc2-1b3cfa6a0fa9", "row_index": 0, "timestamp": "2017-03-05T13:39:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58385f6-aa38-4505-8bc2-1b3cfa6a0fa9", "eventTime": "2017-03-05T13:39:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJybXlzYmoxL0M2K1VaVTA3cEtESDR6cTRwVVRiQ0psU0hSaXMwajZYYVZGRks5T2djRlJucDdZc1lJMEJlNWdUSzJ3Wi9vSk56UkQ0V1JRNDlFa3p5Qi9nNWtQZjdOUjhjSjVseGxqcDB1Y3phUVdlVzlWVmRIcTNVUitzT1lQaFVaeWkwYjVpL2RKS3BUNjV0THJmOURWVVRiL1RGa0JuRndJUGdpZ0dHVkhROHczV2wvNTN0VlZLVFFBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f73b0d6-be3f-49ac-84fa-b3024a2bbff6", "record_id": "flaws_cloudtrail:0000001:7f73b0d6-be3f-49ac-84fa-b3024a2bbff6", "row_index": 1, "timestamp": "2017-03-05T13:39:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f73b0d6-be3f-49ac-84fa-b3024a2bbff6", "eventTime": "2017-03-05T13:39:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvcGVCeFhvOUhGQWMzZWVpRWxMam14MlVGa2kwVGNhc3NRNTdvejFXWUJmM0Z1T1pKdE9wSFo4UjA0M2tDa2tBTmd5YW0remVLRFYrZVBxc0tvc3E1b3Nrb0Z1MkhQeWN2RkdqcDJzU2luVXM3VkpwUG9HbVdBcG5CQTNxemdmREoyOERCQVlrOFU1ejYvQVNmdXBuZTV6MnVmWXprUlduMmNZcnBhdGxEV2xpVlJYWEY4YUxtSnFkcjN5OCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f6f0cf-7ebb-40c9-9305-214292b00c338", "record_id": "flaws_cloudtrail:0000002:b3f6f0cf-7ebb-40c9-9305-214292b00c338", "row_index": 2, "timestamp": "2017-03-05T13:39:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f6f0cf-7ebb-40c9-9305-214292b00c338", "eventTime": "2017-03-05T13:39:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlTzBsekRpOWh6eWp1TGNpdEZaV1hMRk1ZZUt5WjJIZTJQL1JoNGFkTXFSYVBUcHFlbHRhcmd2SVMyVFpKb2NhV1JDRkt1TFNHUGx5Sk1ubG1DRUZwMENCVVJ1ZEZQVWYxbGJnSEdCNDJMamdhT2ZkOUEra2dRbVhOQkwxWXl3NFJ2NDd4K1h3TXhNY0ZZeTI1TUFrbms0S0czWk05TTI1OE5odGJWQ3FXcXdxajRaM2NiNVE1ajh5eU5xQiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9769c9-b21c-4299-bb37-d4b70f677269", "record_id": "flaws_cloudtrail:0000003:4e9769c9-b21c-4299-bb37-d4b70f677269", "row_index": 3, "timestamp": "2017-03-05T13:40:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9769c9-b21c-4299-bb37-d4b70f677269", "eventTime": "2017-03-05T13:40:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30cfc3c2-a116-4e51-8212-5af3783b9dba", "record_id": "flaws_cloudtrail:0000004:30cfc3c2-a116-4e51-8212-5af3783b9dba", "row_index": 4, "timestamp": "2017-03-05T13:40:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30cfc3c2-a116-4e51-8212-5af3783b9dba", "eventTime": "2017-03-05T13:40:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bb7c418-e6be-4fc9-b8b4-8fb7c06b50e3", "record_id": "flaws_cloudtrail:0000005:7bb7c418-e6be-4fc9-b8b4-8fb7c06b50e3", "row_index": 5, "timestamp": "2017-03-05T13:40:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bb7c418-e6be-4fc9-b8b4-8fb7c06b50e3", "eventTime": "2017-03-05T13:40:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiamxxNm1TKzk1ZThlUWdqWTd4Q2xpNkdvQUpsUG90bXQ5aVJrY1FzSWcrR1lHWWxCTzJnUW9vb1J5N1d2NXVpTFJ2NGMrR2c4TGduTDcydXcwa1JYNDh5V1d4bDNPOHBYZ1NLTkZzNkkxeW5HcFRRYmZoeCt1R1owTGtyd3IwZnA5WW40QndlQ09ZQ2tnMG4xeTNEa3gwV05sc2ViQ1pBMnYxTXExRXJlNm5keG1teVhRQm5sMWFkelhRSyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d40d4b-71c6-4343-a766-efa615039eff", "record_id": "flaws_cloudtrail:0000006:01d40d4b-71c6-4343-a766-efa615039eff", "row_index": 6, "timestamp": "2017-03-05T13:40:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d40d4b-71c6-4343-a766-efa615039eff", "eventTime": "2017-03-05T13:40:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuQWMyOVBVdGtyN0xrV1BVTndDRFBIbTVsVnZCRTBNekVzNUxnVFhIVE13Wm8xcWNtM0Y0ZHVNYU5MbUh5ME5Pa01iZU5RQnI4U2hTSUdGaExXUktTQ3VZM2Q5WENpZW45Vkg5ZngxeXFxZCtGUlhNeWpkd0l5U0tyWnR5RmJSTG5ZOHNQQmhnMTVKRm5PVG5yOGJqaTZGRXM1cVFMVDIxWXo4ZEplRzduNzJybURxVmlObCt0aGxjR3ZvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ef889a-eea0-4721-9154-bd446e4f4e40", "record_id": "flaws_cloudtrail:0000007:71ef889a-eea0-4721-9154-bd446e4f4e40", "row_index": 7, "timestamp": "2017-03-05T13:40:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ef889a-eea0-4721-9154-bd446e4f4e40", "eventTime": "2017-03-05T13:40:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHajdNRWJWU0g5MUhRbXh6UmtvNFNjcm1ZOTBpUWl1aGJiRXV6dCtoMkJzRzNrWXF6bmdPWUNUaDFEcElxdk1KQWk3ZlYzS2JpY0VxNHRoQXA4Umt1Sm1GVzhmODI3TE45b0wxWTM0U0pyWFVKTHNUYUxMdWZHeUVpa01jSkc3c2RLcDBSckFZcnc3OW9mMXhzVXhKcEE4TW1qMjVUeGZ2TldKMkI2ZzVLK29OdW42NUdrQXZ4a0tyVm12biIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4229fcf4-7b08-4029-8648-5b882149dbbb1", "record_id": "flaws_cloudtrail:0000008:4229fcf4-7b08-4029-8648-5b882149dbbb1", "row_index": 8, "timestamp": "2017-03-05T13:40:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4229fcf4-7b08-4029-8648-5b882149dbbb1", "eventTime": "2017-03-05T13:40:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdGd6NDk0aHhaYXRveitJT25RdlZYakp1Vk83RFpXd0hIYTJmaHlGZitKRkhOTFhoWU9LRGRWekNqUVZnV2hWVURpVDNucms2ZFlNbUpWOWgzVXM5VERlR1VLVUhHeFRDVllYa2ExVmdRZ0I2bVhUSFd4bzVwVHlmZENBUXN2dUVZd0xxRnRCaEJ2c0lWM1FEUXZYcGxaODR0VldPaGVodUc3NS83RThrTFhIOENGT3lXZmx6RXlrRmFjT0JhTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d831b8-cb43-4a7e-9a18-263ffe2c5872", "record_id": "flaws_cloudtrail:0000009:c3d831b8-cb43-4a7e-9a18-263ffe2c5872", "row_index": 9, "timestamp": "2017-03-05T13:40:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d831b8-cb43-4a7e-9a18-263ffe2c5872", "eventTime": "2017-03-05T13:40:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQUzZrS0k2NkdQYUFqS045U0kzaU9xSjkrRjJMSGNDSzVCdXVoSGlZZWFqNkF1N0NHc1ZWaENlWXhiUy84UmttMXlESW5MRHJuR3JBQjhOZnlyWTY0V2dhNzRPNlYveGo5V3U0R3ZRTmNsTHBFQ2JQMlhjTHZxM3BlZVJFRFJtNzJLM0xTWW5XZ1BrWGswQ3B2YXorMHUvWVdvRkwxY1NVQkRVTExGcWExbDVlTkFmZWlxa2gxN0RFMTdQdiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85e2dc6-7531-4789-b9b2-17559f6dc92", "record_id": "flaws_cloudtrail:0000010:f85e2dc6-7531-4789-b9b2-17559f6dc92", "row_index": 10, "timestamp": "2017-03-05T13:40:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85e2dc6-7531-4789-b9b2-17559f6dc92", "eventTime": "2017-03-05T13:40:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhQjRqRDRJeHk3VlZodTY3ZTlSVlRQelEySVpaSHNnTHIwNWl3WVJMOFRBdDZ1aGZPd2pyNVdnQmZlM01LL0ZyZFdxS2tXVHJZcXpmMjhBeW9DZDVFczBNazNZV1diUUtYWlM2dXlzY3ptY1FSSURkY092M2VmTXNvdFd6YTF1RlFtYyszUEwrMlJ6T1dpamxwRE44RFRWalNvRW9RZ24ycnBxL2ZBWnZLcGdVaEh6U1Qxa2JLemhwdkFRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e537740-e7c1-432f-b863-54b1691e22e9", "record_id": "flaws_cloudtrail:0000011:39e537740-e7c1-432f-b863-54b1691e22e9", "row_index": 11, "timestamp": "2017-03-05T13:40:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e537740-e7c1-432f-b863-54b1691e22e9", "eventTime": "2017-03-05T13:40:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNEFmaDJHNVJoNVYxRS9SL1ZBK2U0MEhkbGRBWkl6MUJPTzFQc0RDb05BWnR6RDY4cnZYNkN4UkZTaStkbnNBZ05DdUg3N0w2RzI3MDc0QmhPbFlMYUdWb3dBTlcrazZSN2I4amY2K1FXUGozckQrb2k3c2c1Y3ZDck1CanpnVGw0UnR2WkhTZHJEVHNXVGpJRXZpcGt0d1lqUFI3OUxlcExaVlg5T204OTRWTG9rbGwxeGV1UWlHRHA4YSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757682-39f5-4c64-90c3-5e15950", "record_id": "flaws_cloudtrail:0000012:757682-39f5-4c64-90c3-5e15950", "row_index": 12, "timestamp": "2017-03-05T13:40:35Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757682-39f5-4c64-90c3-5e15950", "eventTime": "2017-03-05T13:40:35Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: arn:aws:iam::811596193553:user/backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "187171-8bfb-400a-87a6-b366f0ed09fc", "record_id": "flaws_cloudtrail:0000013:187171-8bfb-400a-87a6-b366f0ed09fc", "row_index": 13, "timestamp": "2017-03-05T13:42:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "187171-8bfb-400a-87a6-b366f0ed09fc", "eventTime": "2017-03-05T13:42:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96749f9e-b090-4824-b23f-0696ae69eba2", "record_id": "flaws_cloudtrail:0000014:96749f9e-b090-4824-b23f-0696ae69eba2", "row_index": 14, "timestamp": "2017-03-05T13:42:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96749f9e-b090-4824-b23f-0696ae69eba2", "eventTime": "2017-03-05T13:42:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRQjlDL3FQa0lCeGRFcmF2K0ZmWFhjWU5CUk55WCtyUU1iYWlkQVY3bFIzWXVTbzdrUlArYlRkRGZQVTlHN3lhNGpPcmNpemdVY05GcjBCYTR6NnhRUktZZFZKeFJSSXpialJXc3laSkRtUS9ZMWtNUVdTNjlhY2RpamFZWWlqTGYzMUI1L2Jxb1YrS2pPYlJpTzIzQzZadTloMHpMWGRBR1R2NnJvZEpnb25JK1lMeG9IeE5ZbUZtdXZLMiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "923a4b93-13e2-450d-a617-95104e43b6c1", "record_id": "flaws_cloudtrail:0000015:923a4b93-13e2-450d-a617-95104e43b6c1", "row_index": 15, "timestamp": "2017-03-05T13:42:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "923a4b93-13e2-450d-a617-95104e43b6c1", "eventTime": "2017-03-05T13:42:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzeDk2dUFWKzA4bmxNTHBROG5UNXlaRm1keFVOaHdNZ05Ja1VYZnhtclVFZTRmTmZMb1BQek1CcFhlU2VXbG5nNHFya0QrNDh6ZmdndEtZckVwVGlBUGRUdWZvb2lYTmQwaGVkQzhLQW1qYmFrRG84VEk2dGZ4V3NvalJ2UDZQMmJuQ3lEdFRRUUo1a21BeThwUWl1T1VjMkFGUjVvOGtmUkpxMmJzNkluVHhwTlZoR0VaMHlYSldRbDdNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ac8ed09-fbf4-4c03-9dc8-b4e0daae0743", "record_id": "flaws_cloudtrail:0000016:0ac8ed09-fbf4-4c03-9dc8-b4e0daae0743", "row_index": 16, "timestamp": "2017-03-05T13:42:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ac8ed09-fbf4-4c03-9dc8-b4e0daae0743", "eventTime": "2017-03-05T13:42:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvbnB6QkZML1VONjgrRmw3VVAxRlI4MlE0ckd1RnJRbHdhVG9MY0ltQ2NlTm9qZ2s3Uk92SHYzemgrOUxGZlZkam1SUkd0WVpBY1loaldqWVdUckRGbFcyTzBoWWdzc3QzSkNWd011cVFtdXI1cjVjcStGNDNNRkgyRGNkc3c2Mng0K0p5TGFqdFEwakRVQnlLZzg0aVIxOHVidjFiaElhVHNtRGF1Q0xvYmpoNVVSbEh3MkF1aGVoVzBwSUcwVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caec70da-d29f-43ea-89f2-4b9fcf03b998", "record_id": "flaws_cloudtrail:0000017:caec70da-d29f-43ea-89f2-4b9fcf03b998", "row_index": 17, "timestamp": "2017-03-05T13:42:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caec70da-d29f-43ea-89f2-4b9fcf03b998", "eventTime": "2017-03-05T13:42:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJab0s0aXhrSUViRFhEOHA1Q052RFdJaHdBVkRLTE1Qd2p6NE43VHBjZXRUSWgvNWVyZnVDbmtjdjFKOEN1QWJpRXYxVDJmZG5KVkc0dUtPckdxTXJOVG9pTHpLVTJlYXRCSkl5Q01SRmltejM0dVM4VmVOVUNZR1VaVjlVZlgyMjF3MitCbXdua2RRZ2JWS3RHYnQyenpsVUo0ZXN3ZzJwWUQ1S1lZWU50SzVqemQ4UnBBUUNva3hXUEYyWCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4c4d543-0868-4419-b2a7-4eb3c72163f", "record_id": "flaws_cloudtrail:0000018:c4c4d543-0868-4419-b2a7-4eb3c72163f", "row_index": 18, "timestamp": "2017-03-05T13:42:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4c4d543-0868-4419-b2a7-4eb3c72163f", "eventTime": "2017-03-05T13:42:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnRHV0RE00VTNYZjBYSEgwSjdQbDJjaHlGcVh2bGlIQXovM0R6VWhBRXRiQzRYTzNKUGJKUmlGc1lrNmdvc2pIc2tqV2F1VXpnZ1d4MnMwT0IzN1V0c1oxK2FqVm9DMmhQWkxKOTJhTTRBMEM4SUplV0NqdlZ6L0tBOGN4bURlSTZDSGNPSG1ENnNXMjNsVkZ1eThCcGNYU3BUZWs1Q0NISk1NZ0hZdUh6YU5nQUovVmpuZTZDUTNFUkJRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02c1803e-0759-4a33-8f52-507808bacbfb", "record_id": "flaws_cloudtrail:0000019:02c1803e-0759-4a33-8f52-507808bacbfb", "row_index": 19, "timestamp": "2017-03-05T13:42:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02c1803e-0759-4a33-8f52-507808bacbfb", "eventTime": "2017-03-05T13:42:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjVjVobmdjOXpGenlQUEd1ekJqVHhCNG9SYks1T21vZThKR2V0T0tFbnoxZ0ZOWEd3a2RNa3lQWk9ndUNOVWJzRm9Uc0ZyTHpqRG4yZDNiaHNGcGdvL2IvaWJoK1lyNW1kWGQyazdYYjBNNnJacVh2TDVRanYxRGtkcTkrWE5Lck1xTnRNdE5MenFOVzRZN1Z2SlhhSEpQK1BBWU1BRXp3U3lyNDZqYmlOL2tGWlhGTjk2OUhkNFFUWVI1QyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3751a68-349b-45fd-b49c-2e4bd526d3f1", "record_id": "flaws_cloudtrail:0000020:c3751a68-349b-45fd-b49c-2e4bd526d3f1", "row_index": 20, "timestamp": "2017-03-05T13:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3751a68-349b-45fd-b49c-2e4bd526d3f1", "eventTime": "2017-03-05T13:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjYklKVno5Wkg2WGRQU05kTU5nWFZ6WHdTMkppK295VlJJbUMzakFLNFVDdEJjKzBmdnhUNGZiUUxuellsTVpMOVZqZHh4bjViMjlEbE1mTWpibGU1QThGMEgvMk5lQjZiWU1HaHN0bjR6YkFtMnZodmN2RHBHQldRWHc1T3FpeDVPbCtGaWJScXpjRHlUWnJIZkRqUDdtdDhWWmdva0wxTzNXbVRXSk9TVlJNWU9ZUGYrY056S3BpdS9HRyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0367d461-9b48-4f71-8bad-f3e4503e7a7d", "record_id": "flaws_cloudtrail:0000021:0367d461-9b48-4f71-8bad-f3e4503e7a7d", "row_index": 21, "timestamp": "2017-03-05T13:43:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0367d461-9b48-4f71-8bad-f3e4503e7a7d", "eventTime": "2017-03-05T13:43:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0be39c4b-4b65-42b6-a926-6746cf538fca", "record_id": "flaws_cloudtrail:0000022:0be39c4b-4b65-42b6-a926-6746cf538fca", "row_index": 22, "timestamp": "2017-03-05T13:44:27Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0be39c4b-4b65-42b6-a926-6746cf538fca", "eventTime": "2017-03-05T13:44:27Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a5cf698-abb9-4411-92a2-b651f3350e64", "record_id": "flaws_cloudtrail:0000023:4a5cf698-abb9-4411-92a2-b651f3350e64", "row_index": 23, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a5cf698-abb9-4411-92a2-b651f3350e64", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5a9fb7-7148-4c6b-b4e2-f7088efaddcb", "record_id": "flaws_cloudtrail:0000024:3d5a9fb7-7148-4c6b-b4e2-f7088efaddcb", "row_index": 24, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5a9fb7-7148-4c6b-b4e2-f7088efaddcb", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a081858-d9d8-42af-aa76-51ec84793b40", "record_id": "flaws_cloudtrail:0000025:3a081858-d9d8-42af-aa76-51ec84793b40", "row_index": 25, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a081858-d9d8-42af-aa76-51ec84793b40", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b02bebb3-99cd-4684-a28d-20e8cb2fad88", "record_id": "flaws_cloudtrail:0000026:b02bebb3-99cd-4684-a28d-20e8cb2fad88", "row_index": 26, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b02bebb3-99cd-4684-a28d-20e8cb2fad88", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94bf912d-1f86-450c-b06d-722fc42f6099", "record_id": "flaws_cloudtrail:0000027:94bf912d-1f86-450c-b06d-722fc42f6099", "row_index": 27, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94bf912d-1f86-450c-b06d-722fc42f6099", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26aae4bc-0cee-41d0-858d-524e005ae968", "record_id": "flaws_cloudtrail:0000028:26aae4bc-0cee-41d0-858d-524e005ae968", "row_index": 28, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26aae4bc-0cee-41d0-858d-524e005ae968", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86f2be36-15ed-4b81-b0f5-85c502e1040f", "record_id": "flaws_cloudtrail:0000029:86f2be36-15ed-4b81-b0f5-85c502e1040f", "row_index": 29, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86f2be36-15ed-4b81-b0f5-85c502e1040f", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f8550f7-1c25-4c4c-9905-9ab85f0ecdbc", "record_id": "flaws_cloudtrail:0000030:9f8550f7-1c25-4c4c-9905-9ab85f0ecdbc", "row_index": 30, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f8550f7-1c25-4c4c-9905-9ab85f0ecdbc", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9815c89e-ab6e-49e1-ae25-2550f351d047", "record_id": "flaws_cloudtrail:0000031:9815c89e-ab6e-49e1-ae25-2550f351d047", "row_index": 31, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9815c89e-ab6e-49e1-ae25-2550f351d047", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ccc15ae-12b6-4676-aec7-95bcf8585a77", "record_id": "flaws_cloudtrail:0000032:0ccc15ae-12b6-4676-aec7-95bcf8585a77", "row_index": 32, "timestamp": "2017-03-05T13:44:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ccc15ae-12b6-4676-aec7-95bcf8585a77", "eventTime": "2017-03-05T13:44:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88861e9d-dce5-4ef8-b343-3f88ec5eaa41", "record_id": "flaws_cloudtrail:0000033:88861e9d-dce5-4ef8-b343-3f88ec5eaa41", "row_index": 33, "timestamp": "2017-03-05T13:44:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88861e9d-dce5-4ef8-b343-3f88ec5eaa41", "eventTime": "2017-03-05T13:44:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1fdc631-94e0-4e06-b878-6c8ca3ffd8e6", "record_id": "flaws_cloudtrail:0000034:e1fdc631-94e0-4e06-b878-6c8ca3ffd8e6", "row_index": 34, "timestamp": "2017-03-05T13:44:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1fdc631-94e0-4e06-b878-6c8ca3ffd8e6", "eventTime": "2017-03-05T13:44:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd67e487-f28f-4aae-b820-e6ef510880d21", "record_id": "flaws_cloudtrail:0000035:dd67e487-f28f-4aae-b820-e6ef510880d21", "row_index": 35, "timestamp": "2017-03-05T13:44:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd67e487-f28f-4aae-b820-e6ef510880d21", "eventTime": "2017-03-05T13:44:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564463ed-1b35-47c9-8f96-3cc89d4afd32", "record_id": "flaws_cloudtrail:0000036:564463ed-1b35-47c9-8f96-3cc89d4afd32", "row_index": 36, "timestamp": "2017-03-05T13:44:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564463ed-1b35-47c9-8f96-3cc89d4afd32", "eventTime": "2017-03-05T13:44:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc30ea0-ab64-4ed7-8fa6-9529fb5f67ff", "record_id": "flaws_cloudtrail:0000037:0dc30ea0-ab64-4ed7-8fa6-9529fb5f67ff", "row_index": 37, "timestamp": "2017-03-05T13:44:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc30ea0-ab64-4ed7-8fa6-9529fb5f67ff", "eventTime": "2017-03-05T13:44:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f5c84b-95ef-4726-aa2c-8514e71b132b", "record_id": "flaws_cloudtrail:0000038:b5f5c84b-95ef-4726-aa2c-8514e71b132b", "row_index": 38, "timestamp": "2017-03-05T13:44:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f5c84b-95ef-4726-aa2c-8514e71b132b", "eventTime": "2017-03-05T13:44:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91c34c32-45c7-41c0-98b7-3df3dba867e7", "record_id": "flaws_cloudtrail:0000039:91c34c32-45c7-41c0-98b7-3df3dba867e7", "row_index": 39, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91c34c32-45c7-41c0-98b7-3df3dba867e7", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2031ca06-264c-4ede-9eb1-b4de0505dd7a", "record_id": "flaws_cloudtrail:0000040:2031ca06-264c-4ede-9eb1-b4de0505dd7a", "row_index": 40, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2031ca06-264c-4ede-9eb1-b4de0505dd7a", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91acf567-5f66-4ad4-8ee1-0328de97cb48", "record_id": "flaws_cloudtrail:0000041:91acf567-5f66-4ad4-8ee1-0328de97cb48", "row_index": 41, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91acf567-5f66-4ad4-8ee1-0328de97cb48", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0013d33f-23cb-46ff-b203-0c670d38d4f1", "record_id": "flaws_cloudtrail:0000042:0013d33f-23cb-46ff-b203-0c670d38d4f1", "row_index": 42, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0013d33f-23cb-46ff-b203-0c670d38d4f1", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6c60445-d438-4821-9060-994279093706", "record_id": "flaws_cloudtrail:0000043:c6c60445-d438-4821-9060-994279093706", "row_index": 43, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6c60445-d438-4821-9060-994279093706", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28ca97da-a20c-4967-8d74-d81bef02f3aa", "record_id": "flaws_cloudtrail:0000044:28ca97da-a20c-4967-8d74-d81bef02f3aa", "row_index": 44, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28ca97da-a20c-4967-8d74-d81bef02f3aa", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c5feb8d-91de-42c9-8a58-ffcaa97a62ac", "record_id": "flaws_cloudtrail:0000045:2c5feb8d-91de-42c9-8a58-ffcaa97a62ac", "row_index": 45, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c5feb8d-91de-42c9-8a58-ffcaa97a62ac", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "995859d-5f1d-4363-9f8e-037a64374d63", "record_id": "flaws_cloudtrail:0000046:995859d-5f1d-4363-9f8e-037a64374d63", "row_index": 46, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "995859d-5f1d-4363-9f8e-037a64374d63", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d694ede6-4191-4983-a66e-b56be5060a06", "record_id": "flaws_cloudtrail:0000047:d694ede6-4191-4983-a66e-b56be5060a06", "row_index": 47, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d694ede6-4191-4983-a66e-b56be5060a06", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391db736-072f-4d91-be51-e330637bdba", "record_id": "flaws_cloudtrail:0000048:391db736-072f-4d91-be51-e330637bdba", "row_index": 48, "timestamp": "2017-03-05T13:44:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391db736-072f-4d91-be51-e330637bdba", "eventTime": "2017-03-05T13:44:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3112d126-f748-4e77-aaac-6dfb88ad1a9b", "record_id": "flaws_cloudtrail:0000049:3112d126-f748-4e77-aaac-6dfb88ad1a9b", "row_index": 49, "timestamp": "2017-03-05T13:44:33Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3112d126-f748-4e77-aaac-6dfb88ad1a9b", "eventTime": "2017-03-05T13:44:33Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b188615-0e32-4894-bb6e-a274211705d3", "record_id": "flaws_cloudtrail:0000050:b188615-0e32-4894-bb6e-a274211705d3", "row_index": 50, "timestamp": "2017-03-05T13:44:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 611, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b188615-0e32-4894-bb6e-a274211705d3", "eventTime": "2017-03-05T13:44:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ff31e41-6a1e-460f-a66d-798a514a134c", "record_id": "flaws_cloudtrail:0000051:6ff31e41-6a1e-460f-a66d-798a514a134c", "row_index": 51, "timestamp": "2017-03-05T13:44:36Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ff31e41-6a1e-460f-a66d-798a514a134c", "eventTime": "2017-03-05T13:44:36Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dac770a-396a-4d7c-9870-6f97c424ebb6", "record_id": "flaws_cloudtrail:0000052:9dac770a-396a-4d7c-9870-6f97c424ebb6", "row_index": 52, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dac770a-396a-4d7c-9870-6f97c424ebb6", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94435-2224-4bd7-9831-c7b31e8e100f", "record_id": "flaws_cloudtrail:0000053:94435-2224-4bd7-9831-c7b31e8e100f", "row_index": 53, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94435-2224-4bd7-9831-c7b31e8e100f", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91b298a8-7a1f-4cc6-8517-6fd289127bd8", "record_id": "flaws_cloudtrail:0000054:91b298a8-7a1f-4cc6-8517-6fd289127bd8", "row_index": 54, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91b298a8-7a1f-4cc6-8517-6fd289127bd8", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4458f383-d804-43a7-8050-2edf30813b", "record_id": "flaws_cloudtrail:0000055:4458f383-d804-43a7-8050-2edf30813b", "row_index": 55, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4458f383-d804-43a7-8050-2edf30813b", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fea418-39a7-4e83-8512-07003fe59b2", "record_id": "flaws_cloudtrail:0000056:28fea418-39a7-4e83-8512-07003fe59b2", "row_index": 56, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fea418-39a7-4e83-8512-07003fe59b2", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e9f043-fdf6-4112-b395-66962fc4282", "record_id": "flaws_cloudtrail:0000057:48e9f043-fdf6-4112-b395-66962fc4282", "row_index": 57, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e9f043-fdf6-4112-b395-66962fc4282", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b3e8d11-3dd0-4545-b768-2f4c144821f1a", "record_id": "flaws_cloudtrail:0000058:3b3e8d11-3dd0-4545-b768-2f4c144821f1a", "row_index": 58, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b3e8d11-3dd0-4545-b768-2f4c144821f1a", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f0e554b-e5e8-4d87-bd97-050577f45d40d", "record_id": "flaws_cloudtrail:0000059:3f0e554b-e5e8-4d87-bd97-050577f45d40d", "row_index": 59, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f0e554b-e5e8-4d87-bd97-050577f45d40d", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0165f2bf-9a49-432c-b4e9-0ab993d5d794", "record_id": "flaws_cloudtrail:0000060:0165f2bf-9a49-432c-b4e9-0ab993d5d794", "row_index": 60, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0165f2bf-9a49-432c-b4e9-0ab993d5d794", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72227a5-358d-466b-88ff-4d2e3928257e", "record_id": "flaws_cloudtrail:0000061:72227a5-358d-466b-88ff-4d2e3928257e", "row_index": 61, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72227a5-358d-466b-88ff-4d2e3928257e", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692f71f2-0b46-4f79-940f-e5e747d6de23", "record_id": "flaws_cloudtrail:0000062:692f71f2-0b46-4f79-940f-e5e747d6de23", "row_index": 62, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692f71f2-0b46-4f79-940f-e5e747d6de23", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdedf8ec-2a3e-46c1-8180-59fe1ccbbc5f", "record_id": "flaws_cloudtrail:0000063:fdedf8ec-2a3e-46c1-8180-59fe1ccbbc5f", "row_index": 63, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdedf8ec-2a3e-46c1-8180-59fe1ccbbc5f", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5a778d-8d4f-4f5b-9d6c-407df5eb4468", "record_id": "flaws_cloudtrail:0000064:0e5a778d-8d4f-4f5b-9d6c-407df5eb4468", "row_index": 64, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5a778d-8d4f-4f5b-9d6c-407df5eb4468", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb7256c1-e45c-4325-9993-d6dab68d11dc", "record_id": "flaws_cloudtrail:0000065:cb7256c1-e45c-4325-9993-d6dab68d11dc", "row_index": 65, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb7256c1-e45c-4325-9993-d6dab68d11dc", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d9ecb1-92ea-4173-ab63-5519d74d1fa2", "record_id": "flaws_cloudtrail:0000066:c9d9ecb1-92ea-4173-ab63-5519d74d1fa2", "row_index": 66, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d9ecb1-92ea-4173-ab63-5519d74d1fa2", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530547caa-7870-4762-aa85-1bb978ba8fda", "record_id": "flaws_cloudtrail:0000067:530547caa-7870-4762-aa85-1bb978ba8fda", "row_index": 67, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530547caa-7870-4762-aa85-1bb978ba8fda", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d87bde-6977-4ade-8fba-b2bc8ec534e1", "record_id": "flaws_cloudtrail:0000068:79d87bde-6977-4ade-8fba-b2bc8ec534e1", "row_index": 68, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d87bde-6977-4ade-8fba-b2bc8ec534e1", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b22cd8-482b-448f-8c25-924bbfae0a14", "record_id": "flaws_cloudtrail:0000069:c4b22cd8-482b-448f-8c25-924bbfae0a14", "row_index": 69, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b22cd8-482b-448f-8c25-924bbfae0a14", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d928bbf-c0a2-419e-9ec0-fb87d11a7434", "record_id": "flaws_cloudtrail:0000070:1d928bbf-c0a2-419e-9ec0-fb87d11a7434", "row_index": 70, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d928bbf-c0a2-419e-9ec0-fb87d11a7434", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a173c03e-6c87-455e-bfc8-24031d5357", "record_id": "flaws_cloudtrail:0000071:a173c03e-6c87-455e-bfc8-24031d5357", "row_index": 71, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a173c03e-6c87-455e-bfc8-24031d5357", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "005e7073-8864-48ea-adc1-35576e9696c", "record_id": "flaws_cloudtrail:0000072:005e7073-8864-48ea-adc1-35576e9696c", "row_index": 72, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "005e7073-8864-48ea-adc1-35576e9696c", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42273c-a7f6-43e9-a7fa-81bdb50775b8", "record_id": "flaws_cloudtrail:0000073:42273c-a7f6-43e9-a7fa-81bdb50775b8", "row_index": 73, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42273c-a7f6-43e9-a7fa-81bdb50775b8", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9d5a44c-4460-4d64-a2b6-755186be4b89d", "record_id": "flaws_cloudtrail:0000074:b9d5a44c-4460-4d64-a2b6-755186be4b89d", "row_index": 74, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9d5a44c-4460-4d64-a2b6-755186be4b89d", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b0b409a-92c6-4396-80e7-ed17973de73", "record_id": "flaws_cloudtrail:0000075:8b0b409a-92c6-4396-80e7-ed17973de73", "row_index": 75, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b0b409a-92c6-4396-80e7-ed17973de73", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b93ab3d8-6ee6-43ab-9ddb-adc04528e020", "record_id": "flaws_cloudtrail:0000076:b93ab3d8-6ee6-43ab-9ddb-adc04528e020", "row_index": 76, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b93ab3d8-6ee6-43ab-9ddb-adc04528e020", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "151e361f-ca54-470f-a2d6-1ecfa9960ca4", "record_id": "flaws_cloudtrail:0000077:151e361f-ca54-470f-a2d6-1ecfa9960ca4", "row_index": 77, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "151e361f-ca54-470f-a2d6-1ecfa9960ca4", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a5224bd-77e5-46a5-a66a-443fe81e8ef7", "record_id": "flaws_cloudtrail:0000078:8a5224bd-77e5-46a5-a66a-443fe81e8ef7", "row_index": 78, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a5224bd-77e5-46a5-a66a-443fe81e8ef7", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db9f6530-becf-40b5-8197-c00182dc0255", "record_id": "flaws_cloudtrail:0000079:db9f6530-becf-40b5-8197-c00182dc0255", "row_index": 79, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db9f6530-becf-40b5-8197-c00182dc0255", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4c304b-2298-4b2d-9e26-5a366e6b4666", "record_id": "flaws_cloudtrail:0000080:6e4c304b-2298-4b2d-9e26-5a366e6b4666", "row_index": 80, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4c304b-2298-4b2d-9e26-5a366e6b4666", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365734d-9b85-4f30-8249-f545e64c8c79", "record_id": "flaws_cloudtrail:0000081:365734d-9b85-4f30-8249-f545e64c8c79", "row_index": 81, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365734d-9b85-4f30-8249-f545e64c8c79", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf12e8b8-0d59-4844-9dbe-f548e331a2ed", "record_id": "flaws_cloudtrail:0000082:bf12e8b8-0d59-4844-9dbe-f548e331a2ed", "row_index": 82, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf12e8b8-0d59-4844-9dbe-f548e331a2ed", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b284ed-2280-4800-9e2f-65213bc3f9ef", "record_id": "flaws_cloudtrail:0000083:26b284ed-2280-4800-9e2f-65213bc3f9ef", "row_index": 83, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b284ed-2280-4800-9e2f-65213bc3f9ef", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390615d-73d5-4ac3-83fe-641e2a6ea7c3", "record_id": "flaws_cloudtrail:0000084:390615d-73d5-4ac3-83fe-641e2a6ea7c3", "row_index": 84, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390615d-73d5-4ac3-83fe-641e2a6ea7c3", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baaae3e5-17e3-48a8-9c90-cca8f93cb720", "record_id": "flaws_cloudtrail:0000085:baaae3e5-17e3-48a8-9c90-cca8f93cb720", "row_index": 85, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baaae3e5-17e3-48a8-9c90-cca8f93cb720", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d1cd5e5-cc4f-4f7e-aea1-7bc4d30101b7", "record_id": "flaws_cloudtrail:0000086:5d1cd5e5-cc4f-4f7e-aea1-7bc4d30101b7", "row_index": 86, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d1cd5e5-cc4f-4f7e-aea1-7bc4d30101b7", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "286c9b9a-c534-4347-8aca-6d2b2f8d2ea9", "record_id": "flaws_cloudtrail:0000087:286c9b9a-c534-4347-8aca-6d2b2f8d2ea9", "row_index": 87, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "286c9b9a-c534-4347-8aca-6d2b2f8d2ea9", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebd9815b-a7ef-4d88-bf94-0122e1ec856c", "record_id": "flaws_cloudtrail:0000088:ebd9815b-a7ef-4d88-bf94-0122e1ec856c", "row_index": 88, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebd9815b-a7ef-4d88-bf94-0122e1ec856c", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c115339-3d92-4143-b3af-fc8e6b9d657d", "record_id": "flaws_cloudtrail:0000089:48c115339-3d92-4143-b3af-fc8e6b9d657d", "row_index": 89, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c115339-3d92-4143-b3af-fc8e6b9d657d", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a524b1a-ab34-47bd-875f-fa5c67cd905c", "record_id": "flaws_cloudtrail:0000090:5a524b1a-ab34-47bd-875f-fa5c67cd905c", "row_index": 90, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a524b1a-ab34-47bd-875f-fa5c67cd905c", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e9246e6-9c22-4b2b-8642-841f3c31d0e6", "record_id": "flaws_cloudtrail:0000091:3e9246e6-9c22-4b2b-8642-841f3c31d0e6", "row_index": 91, "timestamp": "2017-03-05T13:44:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e9246e6-9c22-4b2b-8642-841f3c31d0e6", "eventTime": "2017-03-05T13:44:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273d1d16-b2fc-4682-b5f4-aff8f18e614d", "record_id": "flaws_cloudtrail:0000092:273d1d16-b2fc-4682-b5f4-aff8f18e614d", "row_index": 92, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273d1d16-b2fc-4682-b5f4-aff8f18e614d", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fd9e878-7962-4ffd-a441-e96996b", "record_id": "flaws_cloudtrail:0000093:7fd9e878-7962-4ffd-a441-e96996b", "row_index": 93, "timestamp": "2017-03-05T13:44:38Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fd9e878-7962-4ffd-a441-e96996b", "eventTime": "2017-03-05T13:44:38Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d5bbc9-1d2b-48b3-b6b2-bc6f028a4e38", "record_id": "flaws_cloudtrail:0000094:b0d5bbc9-1d2b-48b3-b6b2-bc6f028a4e38", "row_index": 94, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d5bbc9-1d2b-48b3-b6b2-bc6f028a4e38", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38738c-f410-478f-b641-5c6a6971afd1", "record_id": "flaws_cloudtrail:0000095:38738c-f410-478f-b641-5c6a6971afd1", "row_index": 95, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38738c-f410-478f-b641-5c6a6971afd1", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d98d5772-4585-45b5-b0e5-59c287cc09c4", "record_id": "flaws_cloudtrail:0000096:d98d5772-4585-45b5-b0e5-59c287cc09c4", "row_index": 96, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d98d5772-4585-45b5-b0e5-59c287cc09c4", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfebaf55-c1c0-4ee8-b263-803d14074", "record_id": "flaws_cloudtrail:0000097:bfebaf55-c1c0-4ee8-b263-803d14074", "row_index": 97, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfebaf55-c1c0-4ee8-b263-803d14074", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93932af6-f934-4581-82cd-b0aac414fae6", "record_id": "flaws_cloudtrail:0000098:93932af6-f934-4581-82cd-b0aac414fae6", "row_index": 98, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93932af6-f934-4581-82cd-b0aac414fae6", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba51d059-c304-4cb5-8fe4-9d80c264f4b5", "record_id": "flaws_cloudtrail:0000099:ba51d059-c304-4cb5-8fe4-9d80c264f4b5", "row_index": 99, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba51d059-c304-4cb5-8fe4-9d80c264f4b5", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f5c83fd-d82e-4bf7-b8c6-a9c02e3241dd", "record_id": "flaws_cloudtrail:0000100:7f5c83fd-d82e-4bf7-b8c6-a9c02e3241dd", "row_index": 100, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f5c83fd-d82e-4bf7-b8c6-a9c02e3241dd", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cced98b-c888-4d67-9aee-89855b2cd85c", "record_id": "flaws_cloudtrail:0000101:5cced98b-c888-4d67-9aee-89855b2cd85c", "row_index": 101, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cced98b-c888-4d67-9aee-89855b2cd85c", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aa077ed-d8e0-4115-94f9-7e24c89bc4c2", "record_id": "flaws_cloudtrail:0000102:2aa077ed-d8e0-4115-94f9-7e24c89bc4c2", "row_index": 102, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aa077ed-d8e0-4115-94f9-7e24c89bc4c2", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c623ff35-f27c-4924-bd16-851ee32c8cd0", "record_id": "flaws_cloudtrail:0000103:c623ff35-f27c-4924-bd16-851ee32c8cd0", "row_index": 103, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c623ff35-f27c-4924-bd16-851ee32c8cd0", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60356d-79a0-40ff-accd-b14199281047", "record_id": "flaws_cloudtrail:0000104:60356d-79a0-40ff-accd-b14199281047", "row_index": 104, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60356d-79a0-40ff-accd-b14199281047", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "502de3cd-c58e-4497-8a4e-73e2bd6ef232", "record_id": "flaws_cloudtrail:0000105:502de3cd-c58e-4497-8a4e-73e2bd6ef232", "row_index": 105, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "502de3cd-c58e-4497-8a4e-73e2bd6ef232", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "037d4e12-14c7-48e9-a503-e3704d1a1e69", "record_id": "flaws_cloudtrail:0000106:037d4e12-14c7-48e9-a503-e3704d1a1e69", "row_index": 106, "timestamp": "2017-03-05T13:44:38Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "037d4e12-14c7-48e9-a503-e3704d1a1e69", "eventTime": "2017-03-05T13:44:38Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0b0e870-4fe9-43d6-ae94-d8bbae246271", "record_id": "flaws_cloudtrail:0000107:c0b0e870-4fe9-43d6-ae94-d8bbae246271", "row_index": 107, "timestamp": "2017-03-05T13:44:42Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0b0e870-4fe9-43d6-ae94-d8bbae246271", "eventTime": "2017-03-05T13:44:42Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0580a161-1096-49b2-8e4e-0f4edd6e041e", "record_id": "flaws_cloudtrail:0000108:0580a161-1096-49b2-8e4e-0f4edd6e041e", "row_index": 108, "timestamp": "2017-03-05T13:44:43Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0580a161-1096-49b2-8e4e-0f4edd6e041e", "eventTime": "2017-03-05T13:44:43Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313d48df-1b3e-4ebf-a160-d76e28506d2", "record_id": "flaws_cloudtrail:0000109:313d48df-1b3e-4ebf-a160-d76e28506d2", "row_index": 109, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313d48df-1b3e-4ebf-a160-d76e28506d2", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5b6c75-5814-40cc-afa2-16ce487cf66a", "record_id": "flaws_cloudtrail:0000110:4e5b6c75-5814-40cc-afa2-16ce487cf66a", "row_index": 110, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5b6c75-5814-40cc-afa2-16ce487cf66a", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "301fa2d2-9924-413b-b5a3-620cd1fb7009", "record_id": "flaws_cloudtrail:0000111:301fa2d2-9924-413b-b5a3-620cd1fb7009", "row_index": 111, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "301fa2d2-9924-413b-b5a3-620cd1fb7009", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038e27a8-8c3e-4fc9-81d8-d8e6e64cf3b9", "record_id": "flaws_cloudtrail:0000112:038e27a8-8c3e-4fc9-81d8-d8e6e64cf3b9", "row_index": 112, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038e27a8-8c3e-4fc9-81d8-d8e6e64cf3b9", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32f39e22-b7c1-48df-a88f-f543057f339b", "record_id": "flaws_cloudtrail:0000113:32f39e22-b7c1-48df-a88f-f543057f339b", "row_index": 113, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32f39e22-b7c1-48df-a88f-f543057f339b", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02770d-5e49-4c90-8bf2-b79d465108", "record_id": "flaws_cloudtrail:0000114:02770d-5e49-4c90-8bf2-b79d465108", "row_index": 114, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02770d-5e49-4c90-8bf2-b79d465108", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e2d8d6-9ed2-4da3-9282-9efbbffe65ba", "record_id": "flaws_cloudtrail:0000115:c7e2d8d6-9ed2-4da3-9282-9efbbffe65ba", "row_index": 115, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e2d8d6-9ed2-4da3-9282-9efbbffe65ba", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a836780-21a0-4547-99fd-fcc37fe9bcf4", "record_id": "flaws_cloudtrail:0000116:7a836780-21a0-4547-99fd-fcc37fe9bcf4", "row_index": 116, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a836780-21a0-4547-99fd-fcc37fe9bcf4", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c68406-c7f1-46d0-89b7-627ee911de69", "record_id": "flaws_cloudtrail:0000117:6c68406-c7f1-46d0-89b7-627ee911de69", "row_index": 117, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c68406-c7f1-46d0-89b7-627ee911de69", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b06bcaad-59bf-4580-a78a-862fd919c36b", "record_id": "flaws_cloudtrail:0000118:b06bcaad-59bf-4580-a78a-862fd919c36b", "row_index": 118, "timestamp": "2017-03-05T13:44:44Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b06bcaad-59bf-4580-a78a-862fd919c36b", "eventTime": "2017-03-05T13:44:44Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0376bca-365b-4ba8-ae74-ce235e09a7ba", "record_id": "flaws_cloudtrail:0000119:f0376bca-365b-4ba8-ae74-ce235e09a7ba", "row_index": 119, "timestamp": "2017-03-05T13:44:45Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0376bca-365b-4ba8-ae74-ce235e09a7ba", "eventTime": "2017-03-05T13:44:45Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f826bce0-6666-4d7c-902f-2fabda2c7da5", "record_id": "flaws_cloudtrail:0000120:f826bce0-6666-4d7c-902f-2fabda2c7da5", "row_index": 120, "timestamp": "2017-03-05T13:44:45Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f826bce0-6666-4d7c-902f-2fabda2c7da5", "eventTime": "2017-03-05T13:44:45Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b612909-154e-4d81-aa97-1ba2f00b5e57", "record_id": "flaws_cloudtrail:0000121:b612909-154e-4d81-aa97-1ba2f00b5e57", "row_index": 121, "timestamp": "2017-03-05T13:44:51Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b612909-154e-4d81-aa97-1ba2f00b5e57", "eventTime": "2017-03-05T13:44:51Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88f6b780-fdb9-45c5-9b8c-db9281299f82", "record_id": "flaws_cloudtrail:0000122:88f6b780-fdb9-45c5-9b8c-db9281299f82", "row_index": 122, "timestamp": "2017-03-05T13:44:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88f6b780-fdb9-45c5-9b8c-db9281299f82", "eventTime": "2017-03-05T13:44:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc663db-4905-4053-9da8-811ebd49e1ca", "record_id": "flaws_cloudtrail:0000123:acc663db-4905-4053-9da8-811ebd49e1ca", "row_index": 123, "timestamp": "2017-03-05T13:44:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc663db-4905-4053-9da8-811ebd49e1ca", "eventTime": "2017-03-05T13:44:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f83a59ac-d9f1-42fc-a726-555695ef96d6d", "record_id": "flaws_cloudtrail:0000124:f83a59ac-d9f1-42fc-a726-555695ef96d6d", "row_index": 124, "timestamp": "2017-03-05T13:44:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f83a59ac-d9f1-42fc-a726-555695ef96d6d", "eventTime": "2017-03-05T13:44:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e9d9de-9dd9-4c2e-b115-3fd0fc43fd4f", "record_id": "flaws_cloudtrail:0000125:05e9d9de-9dd9-4c2e-b115-3fd0fc43fd4f", "row_index": 125, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e9d9de-9dd9-4c2e-b115-3fd0fc43fd4f", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09e7585b-6f6a-4e18-a04f-fbd79ff93fd9", "record_id": "flaws_cloudtrail:0000126:09e7585b-6f6a-4e18-a04f-fbd79ff93fd9", "row_index": 126, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09e7585b-6f6a-4e18-a04f-fbd79ff93fd9", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0a2d920-ef76-433e-8afd-188d15ca2b4c", "record_id": "flaws_cloudtrail:0000127:f0a2d920-ef76-433e-8afd-188d15ca2b4c", "row_index": 127, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0a2d920-ef76-433e-8afd-188d15ca2b4c", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3ae508-707d-4053-9a86-6bac6c8ea85f", "record_id": "flaws_cloudtrail:0000128:ea3ae508-707d-4053-9a86-6bac6c8ea85f", "row_index": 128, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3ae508-707d-4053-9a86-6bac6c8ea85f", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b67e7ca1-8097-49c0-ba96-2716d4e62d28", "record_id": "flaws_cloudtrail:0000129:b67e7ca1-8097-49c0-ba96-2716d4e62d28", "row_index": 129, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b67e7ca1-8097-49c0-ba96-2716d4e62d28", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caaf3e76-5a35-4e48-8a6d-14624b4f068d", "record_id": "flaws_cloudtrail:0000130:caaf3e76-5a35-4e48-8a6d-14624b4f068d", "row_index": 130, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caaf3e76-5a35-4e48-8a6d-14624b4f068d", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53134c68-61f2-47fc-8358-1c393da60cfa", "record_id": "flaws_cloudtrail:0000131:53134c68-61f2-47fc-8358-1c393da60cfa", "row_index": 131, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53134c68-61f2-47fc-8358-1c393da60cfa", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e63e4a04-ac56-45e2-9ad0-c09e871e953a", "record_id": "flaws_cloudtrail:0000132:e63e4a04-ac56-45e2-9ad0-c09e871e953a", "row_index": 132, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e63e4a04-ac56-45e2-9ad0-c09e871e953a", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a232747-0438-40de-bac5-c08b9d196e2e", "record_id": "flaws_cloudtrail:0000133:a232747-0438-40de-bac5-c08b9d196e2e", "row_index": 133, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a232747-0438-40de-bac5-c08b9d196e2e", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93b9b76f-e636-4d5d-9772-39c219d803fc", "record_id": "flaws_cloudtrail:0000134:93b9b76f-e636-4d5d-9772-39c219d803fc", "row_index": 134, "timestamp": "2017-03-05T13:44:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93b9b76f-e636-4d5d-9772-39c219d803fc", "eventTime": "2017-03-05T13:44:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17dc3909-a4df-42cf-bce9-153ab10e9bcb", "record_id": "flaws_cloudtrail:0000135:17dc3909-a4df-42cf-bce9-153ab10e9bcb", "row_index": 135, "timestamp": "2017-03-05T13:44:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17dc3909-a4df-42cf-bce9-153ab10e9bcb", "eventTime": "2017-03-05T13:44:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaa180266-c93c-431e-820b-2753fbe76cbc", "record_id": "flaws_cloudtrail:0000136:aaa180266-c93c-431e-820b-2753fbe76cbc", "row_index": 136, "timestamp": "2017-03-05T13:44:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaa180266-c93c-431e-820b-2753fbe76cbc", "eventTime": "2017-03-05T13:44:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34f90c3-00ce-46ca-9e53-5fc16e8d7933", "record_id": "flaws_cloudtrail:0000137:f34f90c3-00ce-46ca-9e53-5fc16e8d7933", "row_index": 137, "timestamp": "2017-03-05T13:44:56Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34f90c3-00ce-46ca-9e53-5fc16e8d7933", "eventTime": "2017-03-05T13:44:56Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0089ed5-ee38-4f48-9787-0ec03b65ab5c", "record_id": "flaws_cloudtrail:0000138:a0089ed5-ee38-4f48-9787-0ec03b65ab5c", "row_index": 138, "timestamp": "2017-03-05T13:44:57Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA9JJN2E1PWBXYOR1J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0089ed5-ee38-4f48-9787-0ec03b65ab5c", "eventTime": "2017-03-05T13:44:57Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA9JJN2E1PWBXYOR1J", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:44:54Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f59557-0894-4fe7-ab26-cd6383c8f56b", "record_id": "flaws_cloudtrail:0000139:8f59557-0894-4fe7-ab26-cd6383c8f56b", "row_index": 139, "timestamp": "2017-03-05T13:44:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f59557-0894-4fe7-ab26-cd6383c8f56b", "eventTime": "2017-03-05T13:44:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdca44c9-9e2f-48f2-bcb3-777e9e615ee0", "record_id": "flaws_cloudtrail:0000140:fdca44c9-9e2f-48f2-bcb3-777e9e615ee0", "row_index": 140, "timestamp": "2017-03-05T13:44:58Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdca44c9-9e2f-48f2-bcb3-777e9e615ee0", "eventTime": "2017-03-05T13:44:58Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "001c3646-da0b-4713-a675-71f34ec2c5a9", "record_id": "flaws_cloudtrail:0000141:001c3646-da0b-4713-a675-71f34ec2c5a9", "row_index": 141, "timestamp": "2017-03-05T13:44:59Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "001c3646-da0b-4713-a675-71f34ec2c5a9", "eventTime": "2017-03-05T13:44:59Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d5eb36f-b075-4dd7-ae86-e9db01bf3d58", "record_id": "flaws_cloudtrail:0000142:5d5eb36f-b075-4dd7-ae86-e9db01bf3d58", "row_index": 142, "timestamp": "2017-03-05T13:44:59Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d5eb36f-b075-4dd7-ae86-e9db01bf3d58", "eventTime": "2017-03-05T13:44:59Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334a4f51-8435-41f6-b902-175a47051e", "record_id": "flaws_cloudtrail:0000143:334a4f51-8435-41f6-b902-175a47051e", "row_index": 143, "timestamp": "2017-03-05T13:44:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334a4f51-8435-41f6-b902-175a47051e", "eventTime": "2017-03-05T13:44:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7d2be2-5ab5-4904-8a02-2dbe1b52b7c5", "record_id": "flaws_cloudtrail:0000144:ad7d2be2-5ab5-4904-8a02-2dbe1b52b7c5", "row_index": 144, "timestamp": "2017-03-05T13:44:59Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAAVMZALJRX7VJRF15", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7d2be2-5ab5-4904-8a02-2dbe1b52b7c5", "eventTime": "2017-03-05T13:44:59Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAAVMZALJRX7VJRF15", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:44:59Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70cfa519-45d8-44fc-883f-02c58d4286ae", "record_id": "flaws_cloudtrail:0000145:70cfa519-45d8-44fc-883f-02c58d4286ae", "row_index": 145, "timestamp": "2017-03-05T13:44:59Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70cfa519-45d8-44fc-883f-02c58d4286ae", "eventTime": "2017-03-05T13:44:59Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e274a6-2776-48aa-ad03-47433e08986f", "record_id": "flaws_cloudtrail:0000146:76e274a6-2776-48aa-ad03-47433e08986f", "row_index": 146, "timestamp": "2017-03-05T13:45:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e274a6-2776-48aa-ad03-47433e08986f", "eventTime": "2017-03-05T13:45:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38dccd5f-fc0e-4553-943b-6b4912a61c8d", "record_id": "flaws_cloudtrail:0000147:38dccd5f-fc0e-4553-943b-6b4912a61c8d", "row_index": 147, "timestamp": "2017-03-05T13:45:04Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA4KBQJBFPBQLY9QRF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38dccd5f-fc0e-4553-943b-6b4912a61c8d", "eventTime": "2017-03-05T13:45:04Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA4KBQJBFPBQLY9QRF", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:04Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a88828ff-1239-452c-9a7f-2f2fbb708a39", "record_id": "flaws_cloudtrail:0000148:a88828ff-1239-452c-9a7f-2f2fbb708a39", "row_index": 148, "timestamp": "2017-03-05T13:45:04Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a88828ff-1239-452c-9a7f-2f2fbb708a39", "eventTime": "2017-03-05T13:45:04Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3003e5d4-9f90-4bb1-b672-d054cf9d09e7", "record_id": "flaws_cloudtrail:0000149:3003e5d4-9f90-4bb1-b672-d054cf9d09e7", "row_index": 149, "timestamp": "2017-03-05T13:45:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3003e5d4-9f90-4bb1-b672-d054cf9d09e7", "eventTime": "2017-03-05T13:45:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "595608f-e85e-488e-bc85-4dff4029bd5d", "record_id": "flaws_cloudtrail:0000150:595608f-e85e-488e-bc85-4dff4029bd5d", "row_index": 150, "timestamp": "2017-03-05T13:45:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "595608f-e85e-488e-bc85-4dff4029bd5d", "eventTime": "2017-03-05T13:45:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c041bb79-6b84-4095-97e1-ad3f3cc35d5a", "record_id": "flaws_cloudtrail:0000151:c041bb79-6b84-4095-97e1-ad3f3cc35d5a", "row_index": 151, "timestamp": "2017-03-05T13:45:04Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c041bb79-6b84-4095-97e1-ad3f3cc35d5a", "eventTime": "2017-03-05T13:45:04Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e764788-adff-4692-9195-fb8b182ed00d", "record_id": "flaws_cloudtrail:0000152:e764788-adff-4692-9195-fb8b182ed00d", "row_index": 152, "timestamp": "2017-03-05T13:45:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e764788-adff-4692-9195-fb8b182ed00d", "eventTime": "2017-03-05T13:45:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68df7291-34fd-45ca-bee6-8e6f5d8cd37c", "record_id": "flaws_cloudtrail:0000153:68df7291-34fd-45ca-bee6-8e6f5d8cd37c", "row_index": 153, "timestamp": "2017-03-05T13:45:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68df7291-34fd-45ca-bee6-8e6f5d8cd37c", "eventTime": "2017-03-05T13:45:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "992bfb8f-0a32-42c4-8c76-1dd434263ad20", "record_id": "flaws_cloudtrail:0000154:992bfb8f-0a32-42c4-8c76-1dd434263ad20", "row_index": 154, "timestamp": "2017-03-05T13:45:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "992bfb8f-0a32-42c4-8c76-1dd434263ad20", "eventTime": "2017-03-05T13:45:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4df807-3c01-43ca-8a14-f27172a", "record_id": "flaws_cloudtrail:0000155:ce4df807-3c01-43ca-8a14-f27172a", "row_index": 155, "timestamp": "2017-03-05T13:45:08Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4df807-3c01-43ca-8a14-f27172a", "eventTime": "2017-03-05T13:45:08Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0740ee1-1cfe-42a5-aaa3-4c384b8021a8", "record_id": "flaws_cloudtrail:0000156:d0740ee1-1cfe-42a5-aaa3-4c384b8021a8", "row_index": 156, "timestamp": "2017-03-05T13:45:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0740ee1-1cfe-42a5-aaa3-4c384b8021a8", "eventTime": "2017-03-05T13:45:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e262d57a-252f-48eb-af43-6c9efd4f532e", "record_id": "flaws_cloudtrail:0000157:e262d57a-252f-48eb-af43-6c9efd4f532e", "row_index": 157, "timestamp": "2017-03-05T13:45:08Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAEM8AZTCR5JXES2LQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e262d57a-252f-48eb-af43-6c9efd4f532e", "eventTime": "2017-03-05T13:45:08Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAEM8AZTCR5JXES2LQ", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:08Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d8ae94-b35d-46ef-bd5c-720a4a7b62be", "record_id": "flaws_cloudtrail:0000158:e2d8ae94-b35d-46ef-bd5c-720a4a7b62be", "row_index": 158, "timestamp": "2017-03-05T13:45:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d8ae94-b35d-46ef-bd5c-720a4a7b62be", "eventTime": "2017-03-05T13:45:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc3f634-c050-4f40-9cec-d87ab346dc63", "record_id": "flaws_cloudtrail:0000159:2fc3f634-c050-4f40-9cec-d87ab346dc63", "row_index": 159, "timestamp": "2017-03-05T13:45:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc3f634-c050-4f40-9cec-d87ab346dc63", "eventTime": "2017-03-05T13:45:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "466776c7-5f0c-46ee-81ff-8b02fd258357", "record_id": "flaws_cloudtrail:0000160:466776c7-5f0c-46ee-81ff-8b02fd258357", "row_index": 160, "timestamp": "2017-03-05T13:45:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "466776c7-5f0c-46ee-81ff-8b02fd258357", "eventTime": "2017-03-05T13:45:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb17ef75-d335-4634-97b1-3483f56e567a", "record_id": "flaws_cloudtrail:0000161:fb17ef75-d335-4634-97b1-3483f56e567a", "row_index": 161, "timestamp": "2017-03-05T13:45:09Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAOSV5SQUM7RLZVOZQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb17ef75-d335-4634-97b1-3483f56e567a", "eventTime": "2017-03-05T13:45:09Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAOSV5SQUM7RLZVOZQ", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:09Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6f8ce48-2aa4-4ec5-a321-ba8e50ecbd7a", "record_id": "flaws_cloudtrail:0000162:d6f8ce48-2aa4-4ec5-a321-ba8e50ecbd7a", "row_index": 162, "timestamp": "2017-03-05T13:45:09Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6f8ce48-2aa4-4ec5-a321-ba8e50ecbd7a", "eventTime": "2017-03-05T13:45:09Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6308db-d8af-4aab-a3e1-fdedc04049e0", "record_id": "flaws_cloudtrail:0000163:ed6308db-d8af-4aab-a3e1-fdedc04049e0", "row_index": 163, "timestamp": "2017-03-05T13:45:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6308db-d8af-4aab-a3e1-fdedc04049e0", "eventTime": "2017-03-05T13:45:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09437efa-fffa-4087-ae27-dd7cd1ddc30e", "record_id": "flaws_cloudtrail:0000164:09437efa-fffa-4087-ae27-dd7cd1ddc30e", "row_index": 164, "timestamp": "2017-03-05T13:45:11Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09437efa-fffa-4087-ae27-dd7cd1ddc30e", "eventTime": "2017-03-05T13:45:11Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361b1c16-4320-46bb-869e-321ab8f556e4", "record_id": "flaws_cloudtrail:0000165:361b1c16-4320-46bb-869e-321ab8f556e4", "row_index": 165, "timestamp": "2017-03-05T13:45:12Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361b1c16-4320-46bb-869e-321ab8f556e4", "eventTime": "2017-03-05T13:45:12Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2691ac4c-3d82-4a8e-953c-133ed6dda927", "record_id": "flaws_cloudtrail:0000166:2691ac4c-3d82-4a8e-953c-133ed6dda927", "row_index": 166, "timestamp": "2017-03-05T13:45:12Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2691ac4c-3d82-4a8e-953c-133ed6dda927", "eventTime": "2017-03-05T13:45:12Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f94dd92-09aa-4397-af71-a54f9fb46d6a", "record_id": "flaws_cloudtrail:0000167:8f94dd92-09aa-4397-af71-a54f9fb46d6a", "row_index": 167, "timestamp": "2017-03-05T13:45:12Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA955WQ4359B7G9W5I", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f94dd92-09aa-4397-af71-a54f9fb46d6a", "eventTime": "2017-03-05T13:45:12Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA955WQ4359B7G9W5I", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:12Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c7bed37-61a2-4267-8c28-7bd196fa273c", "record_id": "flaws_cloudtrail:0000168:8c7bed37-61a2-4267-8c28-7bd196fa273c", "row_index": 168, "timestamp": "2017-03-05T13:45:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c7bed37-61a2-4267-8c28-7bd196fa273c", "eventTime": "2017-03-05T13:45:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f058ab7-e55c-48a0-8e07-d275ed3f6f97", "record_id": "flaws_cloudtrail:0000169:0f058ab7-e55c-48a0-8e07-d275ed3f6f97", "row_index": 169, "timestamp": "2017-03-05T13:45:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f058ab7-e55c-48a0-8e07-d275ed3f6f97", "eventTime": "2017-03-05T13:45:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e746a04-4818-44a9-ad92-51fcfe2a14a0", "record_id": "flaws_cloudtrail:0000170:6e746a04-4818-44a9-ad92-51fcfe2a14a0", "row_index": 170, "timestamp": "2017-03-05T13:45:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e746a04-4818-44a9-ad92-51fcfe2a14a0", "eventTime": "2017-03-05T13:45:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b2fd56-11bc-421d-a838-612d0469e167", "record_id": "flaws_cloudtrail:0000171:92b2fd56-11bc-421d-a838-612d0469e167", "row_index": 171, "timestamp": "2017-03-05T13:45:13Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b2fd56-11bc-421d-a838-612d0469e167", "eventTime": "2017-03-05T13:45:13Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7efe56-fbb1-4c20-960d-b0ccfed6928f", "record_id": "flaws_cloudtrail:0000172:ad7efe56-fbb1-4c20-960d-b0ccfed6928f", "row_index": 172, "timestamp": "2017-03-05T13:45:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7efe56-fbb1-4c20-960d-b0ccfed6928f", "eventTime": "2017-03-05T13:45:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d855f5a-87bb-40f7-9e6e-7d4085c172b9", "record_id": "flaws_cloudtrail:0000173:6d855f5a-87bb-40f7-9e6e-7d4085c172b9", "row_index": 173, "timestamp": "2017-03-05T13:45:13Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARRQ1WY1T3F56L9RP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d855f5a-87bb-40f7-9e6e-7d4085c172b9", "eventTime": "2017-03-05T13:45:13Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARRQ1WY1T3F56L9RP", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:13Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73eab653-5fa0-4c26-bdf4-cf0ed578e130", "record_id": "flaws_cloudtrail:0000174:73eab653-5fa0-4c26-bdf4-cf0ed578e130", "row_index": 174, "timestamp": "2017-03-05T13:45:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73eab653-5fa0-4c26-bdf4-cf0ed578e130", "eventTime": "2017-03-05T13:45:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84b7daed-e0b0-4a4e-84de-c3e4898eed9d", "record_id": "flaws_cloudtrail:0000175:84b7daed-e0b0-4a4e-84de-c3e4898eed9d", "row_index": 175, "timestamp": "2017-03-05T13:45:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84b7daed-e0b0-4a4e-84de-c3e4898eed9d", "eventTime": "2017-03-05T13:45:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19bd4a0e-f669-4c6d-8a4d-371c1a99e9b1", "record_id": "flaws_cloudtrail:0000176:19bd4a0e-f669-4c6d-8a4d-371c1a99e9b1", "row_index": 176, "timestamp": "2017-03-05T13:45:15Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19bd4a0e-f669-4c6d-8a4d-371c1a99e9b1", "eventTime": "2017-03-05T13:45:15Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24599cd-bfde-4c39-97d9-c381c94b6ea1", "record_id": "flaws_cloudtrail:0000177:24599cd-bfde-4c39-97d9-c381c94b6ea1", "row_index": 177, "timestamp": "2017-03-05T13:45:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24599cd-bfde-4c39-97d9-c381c94b6ea1", "eventTime": "2017-03-05T13:45:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3cc987-d74c-4000-926e-7b76e2a222b7", "record_id": "flaws_cloudtrail:0000178:ba3cc987-d74c-4000-926e-7b76e2a222b7", "row_index": 178, "timestamp": "2017-03-05T13:45:16Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3cc987-d74c-4000-926e-7b76e2a222b7", "eventTime": "2017-03-05T13:45:16Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e42f9ff0-dd8c-4db0-b794-79d00800c3e", "record_id": "flaws_cloudtrail:0000179:e42f9ff0-dd8c-4db0-b794-79d00800c3e", "row_index": 179, "timestamp": "2017-03-05T13:45:16Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA8EHOCA9EYNAWOG59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e42f9ff0-dd8c-4db0-b794-79d00800c3e", "eventTime": "2017-03-05T13:45:16Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA8EHOCA9EYNAWOG59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f675457-ebdf-476b-b4b3-16673e2df565", "record_id": "flaws_cloudtrail:0000180:f6f675457-ebdf-476b-b4b3-16673e2df565", "row_index": 180, "timestamp": "2017-03-05T13:45:16Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f675457-ebdf-476b-b4b3-16673e2df565", "eventTime": "2017-03-05T13:45:16Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "936c6491-ab60-4101-90c9-66217cc8093", "record_id": "flaws_cloudtrail:0000181:936c6491-ab60-4101-90c9-66217cc8093", "row_index": 181, "timestamp": "2017-03-05T13:45:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "936c6491-ab60-4101-90c9-66217cc8093", "eventTime": "2017-03-05T13:45:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f719a534-fa42-464c-b7ec-02012f9f84de", "record_id": "flaws_cloudtrail:0000182:f719a534-fa42-464c-b7ec-02012f9f84de", "row_index": 182, "timestamp": "2017-03-05T13:45:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f719a534-fa42-464c-b7ec-02012f9f84de", "eventTime": "2017-03-05T13:45:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1d3c1e2-ff23-4722-8109-1e5401dc146f", "record_id": "flaws_cloudtrail:0000183:c1d3c1e2-ff23-4722-8109-1e5401dc146f", "row_index": 183, "timestamp": "2017-03-05T13:45:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1d3c1e2-ff23-4722-8109-1e5401dc146f", "eventTime": "2017-03-05T13:45:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e41c272-d8aa-4acf-b254-668ee960e612", "record_id": "flaws_cloudtrail:0000184:0e41c272-d8aa-4acf-b254-668ee960e612", "row_index": 184, "timestamp": "2017-03-05T13:45:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e41c272-d8aa-4acf-b254-668ee960e612", "eventTime": "2017-03-05T13:45:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "789fb4a8-133d-4bf5-b24e-5f6fc2b1e40d", "record_id": "flaws_cloudtrail:0000185:789fb4a8-133d-4bf5-b24e-5f6fc2b1e40d", "row_index": 185, "timestamp": "2017-03-05T13:45:19Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "789fb4a8-133d-4bf5-b24e-5f6fc2b1e40d", "eventTime": "2017-03-05T13:45:19Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b797b870-f25d-4806-8d13-863e97c27df0", "record_id": "flaws_cloudtrail:0000186:b797b870-f25d-4806-8d13-863e97c27df0", "row_index": 186, "timestamp": "2017-03-05T13:45:19Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAVR55A2XWUIX8QBKC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b797b870-f25d-4806-8d13-863e97c27df0", "eventTime": "2017-03-05T13:45:19Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAVR55A2XWUIX8QBKC", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:19Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81affdc4-cd25-4b09-b662-faa84a3b4472", "record_id": "flaws_cloudtrail:0000187:81affdc4-cd25-4b09-b662-faa84a3b4472", "row_index": 187, "timestamp": "2017-03-05T13:45:19Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81affdc4-cd25-4b09-b662-faa84a3b4472", "eventTime": "2017-03-05T13:45:19Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b109b1e-de6c-4193-bdea-6c7868917364", "record_id": "flaws_cloudtrail:0000188:2b109b1e-de6c-4193-bdea-6c7868917364", "row_index": 188, "timestamp": "2017-03-05T13:45:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b109b1e-de6c-4193-bdea-6c7868917364", "eventTime": "2017-03-05T13:45:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d112990b1-08ac-4a47-a937-763cd727be46", "record_id": "flaws_cloudtrail:0000189:d112990b1-08ac-4a47-a937-763cd727be46", "row_index": 189, "timestamp": "2017-03-05T13:45:22Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d112990b1-08ac-4a47-a937-763cd727be46", "eventTime": "2017-03-05T13:45:22Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb0590df-289c-4504-b427-af8003bf5d30", "record_id": "flaws_cloudtrail:0000190:fb0590df-289c-4504-b427-af8003bf5d30", "row_index": 190, "timestamp": "2017-03-05T13:45:22Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAEHJFKS5VSGZYLI4J", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb0590df-289c-4504-b427-af8003bf5d30", "eventTime": "2017-03-05T13:45:22Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAEHJFKS5VSGZYLI4J", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:22Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcaa28e7-41fd-49c9-b6d4-8e239809fc922", "record_id": "flaws_cloudtrail:0000191:dcaa28e7-41fd-49c9-b6d4-8e239809fc922", "row_index": 191, "timestamp": "2017-03-05T13:45:22Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcaa28e7-41fd-49c9-b6d4-8e239809fc922", "eventTime": "2017-03-05T13:45:22Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d243b925-c454-4407-b046-7241c9253eaa", "record_id": "flaws_cloudtrail:0000192:d243b925-c454-4407-b046-7241c9253eaa", "row_index": 192, "timestamp": "2017-03-05T13:45:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d243b925-c454-4407-b046-7241c9253eaa", "eventTime": "2017-03-05T13:45:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fe9694c-c670-4a79-8067-200758bfa8d62", "record_id": "flaws_cloudtrail:0000193:9fe9694c-c670-4a79-8067-200758bfa8d62", "row_index": 193, "timestamp": "2017-03-05T13:45:24Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fe9694c-c670-4a79-8067-200758bfa8d62", "eventTime": "2017-03-05T13:45:24Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514513e-6ccd-4f7f-b1fb-29dd0dcecbf8", "record_id": "flaws_cloudtrail:0000194:514513e-6ccd-4f7f-b1fb-29dd0dcecbf8", "row_index": 194, "timestamp": "2017-03-05T13:45:26Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514513e-6ccd-4f7f-b1fb-29dd0dcecbf8", "eventTime": "2017-03-05T13:45:26Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c8b2e56-f885-42ad-a07c-903d92c94dfc", "record_id": "flaws_cloudtrail:0000195:8c8b2e56-f885-42ad-a07c-903d92c94dfc", "row_index": 195, "timestamp": "2017-03-05T13:45:27Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c8b2e56-f885-42ad-a07c-903d92c94dfc", "eventTime": "2017-03-05T13:45:27Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52aac99f-9900-4aea-b968-0bd551ab47b2", "record_id": "flaws_cloudtrail:0000196:52aac99f-9900-4aea-b968-0bd551ab47b2", "row_index": 196, "timestamp": "2017-03-05T13:45:27Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52aac99f-9900-4aea-b968-0bd551ab47b2", "eventTime": "2017-03-05T13:45:27Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a0297c-6934-45cc-8f64-797406e3a98", "record_id": "flaws_cloudtrail:0000197:52a0297c-6934-45cc-8f64-797406e3a98", "row_index": 197, "timestamp": "2017-03-05T13:45:27Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a0297c-6934-45cc-8f64-797406e3a98", "eventTime": "2017-03-05T13:45:27Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af288215f-e051-44eb-8322-69f56ee0a802", "record_id": "flaws_cloudtrail:0000198:af288215f-e051-44eb-8322-69f56ee0a802", "row_index": 198, "timestamp": "2017-03-05T13:45:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af288215f-e051-44eb-8322-69f56ee0a802", "eventTime": "2017-03-05T13:45:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "901b1d3f-f4eb-4ddc-bf78-68d3ac3570ec", "record_id": "flaws_cloudtrail:0000199:901b1d3f-f4eb-4ddc-bf78-68d3ac3570ec", "row_index": 199, "timestamp": "2017-03-05T13:45:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "901b1d3f-f4eb-4ddc-bf78-68d3ac3570ec", "eventTime": "2017-03-05T13:45:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e1a5b6-10e5-411d-a562-48172d76c354", "record_id": "flaws_cloudtrail:0000200:48e1a5b6-10e5-411d-a562-48172d76c354", "row_index": 200, "timestamp": "2017-03-05T13:45:27Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAYC4ZLVC0PLL7D5Q9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e1a5b6-10e5-411d-a562-48172d76c354", "eventTime": "2017-03-05T13:45:27Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAYC4ZLVC0PLL7D5Q9", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:27Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f319706c0-99e0-412a-abb5-42015b", "record_id": "flaws_cloudtrail:0000201:f319706c0-99e0-412a-abb5-42015b", "row_index": 201, "timestamp": "2017-03-05T13:45:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f319706c0-99e0-412a-abb5-42015b", "eventTime": "2017-03-05T13:45:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2456e05-d71e-44c6-933e-0152b20a93dc", "record_id": "flaws_cloudtrail:0000202:c2456e05-d71e-44c6-933e-0152b20a93dc", "row_index": 202, "timestamp": "2017-03-05T13:45:29Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2456e05-d71e-44c6-933e-0152b20a93dc", "eventTime": "2017-03-05T13:45:29Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c643c7a-452f-4717-84b1-64d1cd9f1083", "record_id": "flaws_cloudtrail:0000203:6c643c7a-452f-4717-84b1-64d1cd9f1083", "row_index": 203, "timestamp": "2017-03-05T13:45:29Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIALUY5W5RP6JT7SIYU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c643c7a-452f-4717-84b1-64d1cd9f1083", "eventTime": "2017-03-05T13:45:29Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIALUY5W5RP6JT7SIYU", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:29Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a13df7cc-55a8-4948-8bc0-605c0d1bae86", "record_id": "flaws_cloudtrail:0000204:a13df7cc-55a8-4948-8bc0-605c0d1bae86", "row_index": 204, "timestamp": "2017-03-05T13:45:29Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a13df7cc-55a8-4948-8bc0-605c0d1bae86", "eventTime": "2017-03-05T13:45:29Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85d4a72b-860e-4f13-9991-0089e025c7d5", "record_id": "flaws_cloudtrail:0000205:85d4a72b-860e-4f13-9991-0089e025c7d5", "row_index": 205, "timestamp": "2017-03-05T13:45:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85d4a72b-860e-4f13-9991-0089e025c7d5", "eventTime": "2017-03-05T13:45:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78a5c87e-e7ba-496d-85f2-5c0fd63f4855", "record_id": "flaws_cloudtrail:0000206:78a5c87e-e7ba-496d-85f2-5c0fd63f4855", "row_index": 206, "timestamp": "2017-03-05T13:45:31Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78a5c87e-e7ba-496d-85f2-5c0fd63f4855", "eventTime": "2017-03-05T13:45:31Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "656fc096-59b7-49b7-9c46-2c3ee5b0a17c", "record_id": "flaws_cloudtrail:0000207:656fc096-59b7-49b7-9c46-2c3ee5b0a17c", "row_index": 207, "timestamp": "2017-03-05T13:45:32Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "656fc096-59b7-49b7-9c46-2c3ee5b0a17c", "eventTime": "2017-03-05T13:45:32Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c034b47-8986-48cb-a00a-d2dfcaa749c0", "record_id": "flaws_cloudtrail:0000208:1c034b47-8986-48cb-a00a-d2dfcaa749c0", "row_index": 208, "timestamp": "2017-03-05T13:45:32Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c034b47-8986-48cb-a00a-d2dfcaa749c0", "eventTime": "2017-03-05T13:45:32Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b95aa47-a236-491d-97f5-063339f", "record_id": "flaws_cloudtrail:0000209:0b95aa47-a236-491d-97f5-063339f", "row_index": 209, "timestamp": "2017-03-05T13:45:32Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b95aa47-a236-491d-97f5-063339f", "eventTime": "2017-03-05T13:45:32Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e830e51d-ce30-4178-8474-0faf572eaf30", "record_id": "flaws_cloudtrail:0000210:e830e51d-ce30-4178-8474-0faf572eaf30", "row_index": 210, "timestamp": "2017-03-05T13:45:32Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA0HQGQR9FK4T01XPE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e830e51d-ce30-4178-8474-0faf572eaf30", "eventTime": "2017-03-05T13:45:32Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA0HQGQR9FK4T01XPE", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:32Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b03a8dc-d5fa-4a22-8f4b-199171124d7a", "record_id": "flaws_cloudtrail:0000211:8b03a8dc-d5fa-4a22-8f4b-199171124d7a", "row_index": 211, "timestamp": "2017-03-05T13:45:34Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b03a8dc-d5fa-4a22-8f4b-199171124d7a", "eventTime": "2017-03-05T13:45:34Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5093c233-7e78-4404-a711-fd4f714353b", "record_id": "flaws_cloudtrail:0000212:5093c233-7e78-4404-a711-fd4f714353b", "row_index": 212, "timestamp": "2017-03-05T13:45:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5093c233-7e78-4404-a711-fd4f714353b", "eventTime": "2017-03-05T13:45:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d16861-21d9-47e9-8980-b24dcf7f78ae", "record_id": "flaws_cloudtrail:0000213:16d16861-21d9-47e9-8980-b24dcf7f78ae", "row_index": 213, "timestamp": "2017-03-05T13:45:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d16861-21d9-47e9-8980-b24dcf7f78ae", "eventTime": "2017-03-05T13:45:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d63355-28e5-4ef9-9e8d-677da4e554ab", "record_id": "flaws_cloudtrail:0000214:f8d63355-28e5-4ef9-9e8d-677da4e554ab", "row_index": 214, "timestamp": "2017-03-05T13:45:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d63355-28e5-4ef9-9e8d-677da4e554ab", "eventTime": "2017-03-05T13:45:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dd2fcdb-35b9-4c2d-9600-7c2d0d32ea7f", "record_id": "flaws_cloudtrail:0000215:3dd2fcdb-35b9-4c2d-9600-7c2d0d32ea7f", "row_index": 215, "timestamp": "2017-03-05T13:45:35Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAUDIORKB44P25TF7Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dd2fcdb-35b9-4c2d-9600-7c2d0d32ea7f", "eventTime": "2017-03-05T13:45:35Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAUDIORKB44P25TF7Q", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:35Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a33ca1f-911d-4a8d-a585-2920d3dac116", "record_id": "flaws_cloudtrail:0000216:3a33ca1f-911d-4a8d-a585-2920d3dac116", "row_index": 216, "timestamp": "2017-03-05T13:45:35Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a33ca1f-911d-4a8d-a585-2920d3dac116", "eventTime": "2017-03-05T13:45:35Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7143c5b-758c-4aa5-aaad-7214b9b2a364", "record_id": "flaws_cloudtrail:0000217:f7143c5b-758c-4aa5-aaad-7214b9b2a364", "row_index": 217, "timestamp": "2017-03-05T13:45:35Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7143c5b-758c-4aa5-aaad-7214b9b2a364", "eventTime": "2017-03-05T13:45:35Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d25b61b1-ecf5-4095-a309-a38e688b8090", "record_id": "flaws_cloudtrail:0000218:d25b61b1-ecf5-4095-a309-a38e688b8090", "row_index": 218, "timestamp": "2017-03-05T13:45:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d25b61b1-ecf5-4095-a309-a38e688b8090", "eventTime": "2017-03-05T13:45:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9a6c67-5895-4df8-a95f-cf6293ad2d50", "record_id": "flaws_cloudtrail:0000219:4e9a6c67-5895-4df8-a95f-cf6293ad2d50", "row_index": 219, "timestamp": "2017-03-05T13:45:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9a6c67-5895-4df8-a95f-cf6293ad2d50", "eventTime": "2017-03-05T13:45:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2849bb8-96f1-4362-9348-cb055cdb23cb", "record_id": "flaws_cloudtrail:0000220:d2849bb8-96f1-4362-9348-cb055cdb23cb", "row_index": 220, "timestamp": "2017-03-05T13:45:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2849bb8-96f1-4362-9348-cb055cdb23cb", "eventTime": "2017-03-05T13:45:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbba657d-0f0c-4d4b-9b54-6bc9a5aa8db5", "record_id": "flaws_cloudtrail:0000221:cbba657d-0f0c-4d4b-9b54-6bc9a5aa8db5", "row_index": 221, "timestamp": "2017-03-05T13:45:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbba657d-0f0c-4d4b-9b54-6bc9a5aa8db5", "eventTime": "2017-03-05T13:45:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3f6f72c-4cdd-43b9-94bf-02892e64a2e4", "record_id": "flaws_cloudtrail:0000222:c3f6f72c-4cdd-43b9-94bf-02892e64a2e4", "row_index": 222, "timestamp": "2017-03-05T13:45:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3f6f72c-4cdd-43b9-94bf-02892e64a2e4", "eventTime": "2017-03-05T13:45:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9abea790-edef-4707-b383-c91e2c66354", "record_id": "flaws_cloudtrail:0000223:9abea790-edef-4707-b383-c91e2c66354", "row_index": 223, "timestamp": "2017-03-05T13:45:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9abea790-edef-4707-b383-c91e2c66354", "eventTime": "2017-03-05T13:45:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e850684-4e1c-437d-a1e7-3ef3c314c925", "record_id": "flaws_cloudtrail:0000224:7e850684-4e1c-437d-a1e7-3ef3c314c925", "row_index": 224, "timestamp": "2017-03-05T13:45:54Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e850684-4e1c-437d-a1e7-3ef3c314c925", "eventTime": "2017-03-05T13:45:54Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3addc5-a846-4723-8862-e02af6ff48ea", "record_id": "flaws_cloudtrail:0000225:1b3addc5-a846-4723-8862-e02af6ff48ea", "row_index": 225, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3addc5-a846-4723-8862-e02af6ff48ea", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebc8bdfc-ae90-42b5-9944-69ac4cc9d552", "record_id": "flaws_cloudtrail:0000226:ebc8bdfc-ae90-42b5-9944-69ac4cc9d552", "row_index": 226, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebc8bdfc-ae90-42b5-9944-69ac4cc9d552", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166cfc46-b376-48cd-be81-8910e350e35c", "record_id": "flaws_cloudtrail:0000227:166cfc46-b376-48cd-be81-8910e350e35c", "row_index": 227, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166cfc46-b376-48cd-be81-8910e350e35c", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1489f45d-1396-4595-b93a-06f2d4681f60", "record_id": "flaws_cloudtrail:0000228:1489f45d-1396-4595-b93a-06f2d4681f60", "row_index": 228, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1489f45d-1396-4595-b93a-06f2d4681f60", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e103d49a-1be8-48dc-a53b-74abea7c2d39", "record_id": "flaws_cloudtrail:0000229:e103d49a-1be8-48dc-a53b-74abea7c2d39", "row_index": 229, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e103d49a-1be8-48dc-a53b-74abea7c2d39", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeb2a724-697e-48bc-9029-80d9e583d2e9", "record_id": "flaws_cloudtrail:0000230:aeb2a724-697e-48bc-9029-80d9e583d2e9", "row_index": 230, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeb2a724-697e-48bc-9029-80d9e583d2e9", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "618b9451-def6-4061-a925-097363c0227ee", "record_id": "flaws_cloudtrail:0000231:618b9451-def6-4061-a925-097363c0227ee", "row_index": 231, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "618b9451-def6-4061-a925-097363c0227ee", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9787ecc4-fee7-4464-b716-a1c45f2d8ef9", "record_id": "flaws_cloudtrail:0000232:9787ecc4-fee7-4464-b716-a1c45f2d8ef9", "row_index": 232, "timestamp": "2017-03-05T13:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9787ecc4-fee7-4464-b716-a1c45f2d8ef9", "eventTime": "2017-03-05T13:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4944efd9-1598-4c5b-be14-3ae3b805ea76", "record_id": "flaws_cloudtrail:0000233:4944efd9-1598-4c5b-be14-3ae3b805ea76", "row_index": 233, "timestamp": "2017-03-05T13:45:57Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4944efd9-1598-4c5b-be14-3ae3b805ea76", "eventTime": "2017-03-05T13:45:57Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e181732-89b5-4a5f-9ed4-8cf744d60441", "record_id": "flaws_cloudtrail:0000234:4e181732-89b5-4a5f-9ed4-8cf744d60441", "row_index": 234, "timestamp": "2017-03-05T13:45:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e181732-89b5-4a5f-9ed4-8cf744d60441", "eventTime": "2017-03-05T13:45:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4beeef0d-d32f-4bbf-a647-5b6a559659fc1", "record_id": "flaws_cloudtrail:0000235:4beeef0d-d32f-4bbf-a647-5b6a559659fc1", "row_index": 235, "timestamp": "2017-03-05T13:45:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4beeef0d-d32f-4bbf-a647-5b6a559659fc1", "eventTime": "2017-03-05T13:45:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22bf230e-fade-4120-b0c6-320ea1b5f320", "record_id": "flaws_cloudtrail:0000236:22bf230e-fade-4120-b0c6-320ea1b5f320", "row_index": 236, "timestamp": "2017-03-05T13:45:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22bf230e-fade-4120-b0c6-320ea1b5f320", "eventTime": "2017-03-05T13:45:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fed637cf-ab07-4fcd-9e1e-1adcee2b9bc5", "record_id": "flaws_cloudtrail:0000237:fed637cf-ab07-4fcd-9e1e-1adcee2b9bc5", "row_index": 237, "timestamp": "2017-03-05T13:45:57Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAM18VDIJ243XKIL92", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fed637cf-ab07-4fcd-9e1e-1adcee2b9bc5", "eventTime": "2017-03-05T13:45:57Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAM18VDIJ243XKIL92", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:44:58Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "878960-1e24-41e6-b41d-04a0d84bb4b1", "record_id": "flaws_cloudtrail:0000238:878960-1e24-41e6-b41d-04a0d84bb4b1", "row_index": 238, "timestamp": "2017-03-05T13:45:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "878960-1e24-41e6-b41d-04a0d84bb4b1", "eventTime": "2017-03-05T13:45:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb96dd2-6f30-446a-8ea1-7b5e613a6b38", "record_id": "flaws_cloudtrail:0000239:cfb96dd2-6f30-446a-8ea1-7b5e613a6b38", "row_index": 239, "timestamp": "2017-03-05T13:45:58Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb96dd2-6f30-446a-8ea1-7b5e613a6b38", "eventTime": "2017-03-05T13:45:58Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96fce76e-f878-42c8-a78a-c2ff1bf95198", "record_id": "flaws_cloudtrail:0000240:96fce76e-f878-42c8-a78a-c2ff1bf95198", "row_index": 240, "timestamp": "2017-03-05T13:45:58Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAP607FEGWU8RY05AL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96fce76e-f878-42c8-a78a-c2ff1bf95198", "eventTime": "2017-03-05T13:45:58Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAP607FEGWU8RY05AL", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:45:58Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0140ba-f9b3-413d-a228-e95f573358a8", "record_id": "flaws_cloudtrail:0000241:4e0140ba-f9b3-413d-a228-e95f573358a8", "row_index": 241, "timestamp": "2017-03-05T13:45:58Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0140ba-f9b3-413d-a228-e95f573358a8", "eventTime": "2017-03-05T13:45:58Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "644d403e-b250-44b6-8496-1d351a25b3f2", "record_id": "flaws_cloudtrail:0000242:644d403e-b250-44b6-8496-1d351a25b3f2", "row_index": 242, "timestamp": "2017-03-05T13:45:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "644d403e-b250-44b6-8496-1d351a25b3f2", "eventTime": "2017-03-05T13:45:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcce80aa-d4b8-48a0-8197-24b21fc0ba10", "record_id": "flaws_cloudtrail:0000243:fcce80aa-d4b8-48a0-8197-24b21fc0ba10", "row_index": 243, "timestamp": "2017-03-05T13:46:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcce80aa-d4b8-48a0-8197-24b21fc0ba10", "eventTime": "2017-03-05T13:46:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cebf2dc-1566-45c6-9903-a23d4f104658", "record_id": "flaws_cloudtrail:0000244:2cebf2dc-1566-45c6-9903-a23d4f104658", "row_index": 244, "timestamp": "2017-03-05T13:46:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cebf2dc-1566-45c6-9903-a23d4f104658", "eventTime": "2017-03-05T13:46:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b93638e-ed67-4e58-9dc7-ef8e793f81c4", "record_id": "flaws_cloudtrail:0000245:b93638e-ed67-4e58-9dc7-ef8e793f81c4", "row_index": 245, "timestamp": "2017-03-05T13:46:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b93638e-ed67-4e58-9dc7-ef8e793f81c4", "eventTime": "2017-03-05T13:46:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bade4ca4-da5d-49bf-a3a6-c5c018cddb1a", "record_id": "flaws_cloudtrail:0000246:bade4ca4-da5d-49bf-a3a6-c5c018cddb1a", "row_index": 246, "timestamp": "2017-03-05T13:46:02Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bade4ca4-da5d-49bf-a3a6-c5c018cddb1a", "eventTime": "2017-03-05T13:46:02Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46128b-e36d-442f-8fbf-6e0189a56492", "record_id": "flaws_cloudtrail:0000247:46128b-e36d-442f-8fbf-6e0189a56492", "row_index": 247, "timestamp": "2017-03-05T13:46:02Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46128b-e36d-442f-8fbf-6e0189a56492", "eventTime": "2017-03-05T13:46:02Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ee2610-ab3d-430c-840d-2767142343d3", "record_id": "flaws_cloudtrail:0000248:86ee2610-ab3d-430c-840d-2767142343d3", "row_index": 248, "timestamp": "2017-03-05T13:46:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ee2610-ab3d-430c-840d-2767142343d3", "eventTime": "2017-03-05T13:46:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df3f0989-9f4d-42a5-bf22-9d973a6d1aa5", "record_id": "flaws_cloudtrail:0000249:df3f0989-9f4d-42a5-bf22-9d973a6d1aa5", "row_index": 249, "timestamp": "2017-03-05T13:46:02Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIALLWEZPIZFI93FHAU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df3f0989-9f4d-42a5-bf22-9d973a6d1aa5", "eventTime": "2017-03-05T13:46:02Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIALLWEZPIZFI93FHAU", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:02Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84805ffd-67ea-4ce1-ac3c-00535452ebfb", "record_id": "flaws_cloudtrail:0000250:84805ffd-67ea-4ce1-ac3c-00535452ebfb", "row_index": 250, "timestamp": "2017-03-05T13:46:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84805ffd-67ea-4ce1-ac3c-00535452ebfb", "eventTime": "2017-03-05T13:46:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74838eec-5832-46df-b58a-4e97b3d7e598", "record_id": "flaws_cloudtrail:0000251:74838eec-5832-46df-b58a-4e97b3d7e598", "row_index": 251, "timestamp": "2017-03-05T13:46:03Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74838eec-5832-46df-b58a-4e97b3d7e598", "eventTime": "2017-03-05T13:46:03Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bee1a089-d8e3-4a32-99af-0a13bc044f1e", "record_id": "flaws_cloudtrail:0000252:bee1a089-d8e3-4a32-99af-0a13bc044f1e", "row_index": 252, "timestamp": "2017-03-05T13:46:04Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAE1RD9H2LDT5T0KZ2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bee1a089-d8e3-4a32-99af-0a13bc044f1e", "eventTime": "2017-03-05T13:46:04Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAE1RD9H2LDT5T0KZ2", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:04Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba26969b-3e15-4e42-8867-b31e09bac7b5", "record_id": "flaws_cloudtrail:0000253:ba26969b-3e15-4e42-8867-b31e09bac7b5", "row_index": 253, "timestamp": "2017-03-05T13:46:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba26969b-3e15-4e42-8867-b31e09bac7b5", "eventTime": "2017-03-05T13:46:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e98e049-0cb2-4073-af51-50b88364cf16", "record_id": "flaws_cloudtrail:0000254:8e98e049-0cb2-4073-af51-50b88364cf16", "row_index": 254, "timestamp": "2017-03-05T13:46:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e98e049-0cb2-4073-af51-50b88364cf16", "eventTime": "2017-03-05T13:46:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbff5280-d7e8-4152-874f-91525f11b87d", "record_id": "flaws_cloudtrail:0000255:cbff5280-d7e8-4152-874f-91525f11b87d", "row_index": 255, "timestamp": "2017-03-05T13:46:04Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbff5280-d7e8-4152-874f-91525f11b87d", "eventTime": "2017-03-05T13:46:04Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bb1d300-6a38-4f8d-a2d4-c493a2685fe1", "record_id": "flaws_cloudtrail:0000256:5bb1d300-6a38-4f8d-a2d4-c493a2685fe1", "row_index": 256, "timestamp": "2017-03-05T13:46:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bb1d300-6a38-4f8d-a2d4-c493a2685fe1", "eventTime": "2017-03-05T13:46:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f6e2cb7-5c3a-45d3-8cbf-bfd67807eae0", "record_id": "flaws_cloudtrail:0000257:8f6e2cb7-5c3a-45d3-8cbf-bfd67807eae0", "row_index": 257, "timestamp": "2017-03-05T13:46:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f6e2cb7-5c3a-45d3-8cbf-bfd67807eae0", "eventTime": "2017-03-05T13:46:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21a5fab4-8538-4031-8cca-586d422517df", "record_id": "flaws_cloudtrail:0000258:21a5fab4-8538-4031-8cca-586d422517df", "row_index": 258, "timestamp": "2017-03-05T13:46:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21a5fab4-8538-4031-8cca-586d422517df", "eventTime": "2017-03-05T13:46:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "676ab0f4-3d28-489c-a37c-5164608acf1a", "record_id": "flaws_cloudtrail:0000259:676ab0f4-3d28-489c-a37c-5164608acf1a", "row_index": 259, "timestamp": "2017-03-05T13:46:07Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAPUM51AWJ4NOALCJZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "676ab0f4-3d28-489c-a37c-5164608acf1a", "eventTime": "2017-03-05T13:46:07Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAPUM51AWJ4NOALCJZ", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:07Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57df6f15-6eb4-463f-b07a-97a03cc39fef", "record_id": "flaws_cloudtrail:0000260:57df6f15-6eb4-463f-b07a-97a03cc39fef", "row_index": 260, "timestamp": "2017-03-05T13:46:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57df6f15-6eb4-463f-b07a-97a03cc39fef", "eventTime": "2017-03-05T13:46:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6efabb2-4b15-44d8-9fd7-13d342c3a54b", "record_id": "flaws_cloudtrail:0000261:e6efabb2-4b15-44d8-9fd7-13d342c3a54b", "row_index": 261, "timestamp": "2017-03-05T13:46:07Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6efabb2-4b15-44d8-9fd7-13d342c3a54b", "eventTime": "2017-03-05T13:46:07Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55f302f-4a2c-4a98-9888-dd7f948526", "record_id": "flaws_cloudtrail:0000262:b55f302f-4a2c-4a98-9888-dd7f948526", "row_index": 262, "timestamp": "2017-03-05T13:46:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55f302f-4a2c-4a98-9888-dd7f948526", "eventTime": "2017-03-05T13:46:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b744f1-ee47-4a30-8706-94ac2f1b3069", "record_id": "flaws_cloudtrail:0000263:18b744f1-ee47-4a30-8706-94ac2f1b3069", "row_index": 263, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b744f1-ee47-4a30-8706-94ac2f1b3069", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5b3034d-354d-4e2b-b1bd-3b9dd897d353", "record_id": "flaws_cloudtrail:0000264:d5b3034d-354d-4e2b-b1bd-3b9dd897d353", "row_index": 264, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5b3034d-354d-4e2b-b1bd-3b9dd897d353", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "132f6579-18bb-4a27-b14c-60a7f2f6448a", "record_id": "flaws_cloudtrail:0000265:132f6579-18bb-4a27-b14c-60a7f2f6448a", "row_index": 265, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "132f6579-18bb-4a27-b14c-60a7f2f6448a", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8952b2cb-5ae0-4e0d-89e9-b0c4156e3c14", "record_id": "flaws_cloudtrail:0000266:8952b2cb-5ae0-4e0d-89e9-b0c4156e3c14", "row_index": 266, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8952b2cb-5ae0-4e0d-89e9-b0c4156e3c14", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed52c0d3-d753-4aa4-9318-356cecb0db06", "record_id": "flaws_cloudtrail:0000267:ed52c0d3-d753-4aa4-9318-356cecb0db06", "row_index": 267, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAD1D0PHRGXREBMTCP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed52c0d3-d753-4aa4-9318-356cecb0db06", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAD1D0PHRGXREBMTCP", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec391efa-3350-427b-ad0e-bc726e7bc001", "record_id": "flaws_cloudtrail:0000268:ec391efa-3350-427b-ad0e-bc726e7bc001", "row_index": 268, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec391efa-3350-427b-ad0e-bc726e7bc001", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e5f0c9e-2117-4711-8ab8-d62f573609b0", "record_id": "flaws_cloudtrail:0000269:8e5f0c9e-2117-4711-8ab8-d62f573609b0", "row_index": 269, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAOXUY1ZPPDFVXK4IW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e5f0c9e-2117-4711-8ab8-d62f573609b0", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAOXUY1ZPPDFVXK4IW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871ac1bd-4545-4284-9462-20c024edc986", "record_id": "flaws_cloudtrail:0000270:871ac1bd-4545-4284-9462-20c024edc986", "row_index": 270, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871ac1bd-4545-4284-9462-20c024edc986", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6f7300c-cc08-4acd-8c85-3c5fba50b0de", "record_id": "flaws_cloudtrail:0000271:c6f7300c-cc08-4acd-8c85-3c5fba50b0de", "row_index": 271, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6f7300c-cc08-4acd-8c85-3c5fba50b0de", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa0dec7f-9405-407a-b117-e1c5fc7432e4", "record_id": "flaws_cloudtrail:0000272:aa0dec7f-9405-407a-b117-e1c5fc7432e4", "row_index": 272, "timestamp": "2017-03-05T13:46:10Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa0dec7f-9405-407a-b117-e1c5fc7432e4", "eventTime": "2017-03-05T13:46:10Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdca8153-db97-4968-be21-17b05d53aa31", "record_id": "flaws_cloudtrail:0000273:fdca8153-db97-4968-be21-17b05d53aa31", "row_index": 273, "timestamp": "2017-03-05T13:46:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdca8153-db97-4968-be21-17b05d53aa31", "eventTime": "2017-03-05T13:46:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15902c58-e023-49e9-ac79-c51194d6e04", "record_id": "flaws_cloudtrail:0000274:15902c58-e023-49e9-ac79-c51194d6e04", "row_index": 274, "timestamp": "2017-03-05T13:46:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15902c58-e023-49e9-ac79-c51194d6e04", "eventTime": "2017-03-05T13:46:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e23a1237-7410-459e-a619-945b81312aa", "record_id": "flaws_cloudtrail:0000275:e23a1237-7410-459e-a619-945b81312aa", "row_index": 275, "timestamp": "2017-03-05T13:46:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e23a1237-7410-459e-a619-945b81312aa", "eventTime": "2017-03-05T13:46:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffd693370-7546-4d93-9f38-897ed27793", "record_id": "flaws_cloudtrail:0000276:ffd693370-7546-4d93-9f38-897ed27793", "row_index": 276, "timestamp": "2017-03-05T13:46:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffd693370-7546-4d93-9f38-897ed27793", "eventTime": "2017-03-05T13:46:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f004e299-2d3a-4cb0-bac2-ab09da7ecfc1", "record_id": "flaws_cloudtrail:0000277:f004e299-2d3a-4cb0-bac2-ab09da7ecfc1", "row_index": 277, "timestamp": "2017-03-05T13:46:13Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f004e299-2d3a-4cb0-bac2-ab09da7ecfc1", "eventTime": "2017-03-05T13:46:13Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4deb8a55-707a-47ea-9ab7-989903b703", "record_id": "flaws_cloudtrail:0000278:4deb8a55-707a-47ea-9ab7-989903b703", "row_index": 278, "timestamp": "2017-03-05T13:46:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4deb8a55-707a-47ea-9ab7-989903b703", "eventTime": "2017-03-05T13:46:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "196540c0c-8da0-4a3e-afc7-b3f297ce94cc", "record_id": "flaws_cloudtrail:0000279:196540c0c-8da0-4a3e-afc7-b3f297ce94cc", "row_index": 279, "timestamp": "2017-03-05T13:46:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "196540c0c-8da0-4a3e-afc7-b3f297ce94cc", "eventTime": "2017-03-05T13:46:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbd7c6ad-ed9d-4060-be04-ae9127b5ea2f", "record_id": "flaws_cloudtrail:0000280:dbd7c6ad-ed9d-4060-be04-ae9127b5ea2f", "row_index": 280, "timestamp": "2017-03-05T13:46:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAS64UNXDUA84JG4TU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbd7c6ad-ed9d-4060-be04-ae9127b5ea2f", "eventTime": "2017-03-05T13:46:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAS64UNXDUA84JG4TU", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71e2b341-0546-40d0-8767-709d6ffa20d8", "record_id": "flaws_cloudtrail:0000281:71e2b341-0546-40d0-8767-709d6ffa20d8", "row_index": 281, "timestamp": "2017-03-05T13:46:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71e2b341-0546-40d0-8767-709d6ffa20d8", "eventTime": "2017-03-05T13:46:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6889e77c-81aa-4a9c-9487-910669d6e", "record_id": "flaws_cloudtrail:0000282:6889e77c-81aa-4a9c-9487-910669d6e", "row_index": 282, "timestamp": "2017-03-05T13:46:16Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6889e77c-81aa-4a9c-9487-910669d6e", "eventTime": "2017-03-05T13:46:16Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e352aa3a-6510-4c91-905d-6d1f8f9eaead", "record_id": "flaws_cloudtrail:0000283:e352aa3a-6510-4c91-905d-6d1f8f9eaead", "row_index": 283, "timestamp": "2017-03-05T13:46:16Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA38NOPUNVHDJDYOPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e352aa3a-6510-4c91-905d-6d1f8f9eaead", "eventTime": "2017-03-05T13:46:16Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA38NOPUNVHDJDYOPY", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4f5a92c-4ad6-42d1-9c7e-45ea94bf0560", "record_id": "flaws_cloudtrail:0000284:a4f5a92c-4ad6-42d1-9c7e-45ea94bf0560", "row_index": 284, "timestamp": "2017-03-05T13:46:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4f5a92c-4ad6-42d1-9c7e-45ea94bf0560", "eventTime": "2017-03-05T13:46:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316654c-c784-4c82-bba9-fcacdb1e878d", "record_id": "flaws_cloudtrail:0000285:316654c-c784-4c82-bba9-fcacdb1e878d", "row_index": 285, "timestamp": "2017-03-05T13:46:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316654c-c784-4c82-bba9-fcacdb1e878d", "eventTime": "2017-03-05T13:46:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e11294-1c13-46f2-be0a-3f55c3a47437", "record_id": "flaws_cloudtrail:0000286:7e11294-1c13-46f2-be0a-3f55c3a47437", "row_index": 286, "timestamp": "2017-03-05T13:46:16Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e11294-1c13-46f2-be0a-3f55c3a47437", "eventTime": "2017-03-05T13:46:16Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa4a3b5f-02e1-496b-b295-e4cf7eb28bca", "record_id": "flaws_cloudtrail:0000287:fa4a3b5f-02e1-496b-b295-e4cf7eb28bca", "row_index": 287, "timestamp": "2017-03-05T13:46:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa4a3b5f-02e1-496b-b295-e4cf7eb28bca", "eventTime": "2017-03-05T13:46:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feef9925-4328-4356-9bff-7272bc9d4e37", "record_id": "flaws_cloudtrail:0000288:feef9925-4328-4356-9bff-7272bc9d4e37", "row_index": 288, "timestamp": "2017-03-05T13:46:18Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAYNA6T6AKL4NEGGTC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feef9925-4328-4356-9bff-7272bc9d4e37", "eventTime": "2017-03-05T13:46:18Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAYNA6T6AKL4NEGGTC", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:18Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6d78c0-a048-40df-908f-90a311367ae0", "record_id": "flaws_cloudtrail:0000289:bd6d78c0-a048-40df-908f-90a311367ae0", "row_index": 289, "timestamp": "2017-03-05T13:46:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6d78c0-a048-40df-908f-90a311367ae0", "eventTime": "2017-03-05T13:46:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b43643-f4fb-42fe-9fac-747ea413b50b", "record_id": "flaws_cloudtrail:0000290:3b43643-f4fb-42fe-9fac-747ea413b50b", "row_index": 290, "timestamp": "2017-03-05T13:46:18Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b43643-f4fb-42fe-9fac-747ea413b50b", "eventTime": "2017-03-05T13:46:18Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59866fa-19aa-494b-9fff-a59f3359535c", "record_id": "flaws_cloudtrail:0000291:59866fa-19aa-494b-9fff-a59f3359535c", "row_index": 291, "timestamp": "2017-03-05T13:46:19Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59866fa-19aa-494b-9fff-a59f3359535c", "eventTime": "2017-03-05T13:46:19Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23c3419c-9f76-4845-b86b-1494aaf2a908", "record_id": "flaws_cloudtrail:0000292:23c3419c-9f76-4845-b86b-1494aaf2a908", "row_index": 292, "timestamp": "2017-03-05T13:46:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23c3419c-9f76-4845-b86b-1494aaf2a908", "eventTime": "2017-03-05T13:46:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f111704-ebb9-46dd-ab65-1ac42996ccc", "record_id": "flaws_cloudtrail:0000293:f111704-ebb9-46dd-ab65-1ac42996ccc", "row_index": 293, "timestamp": "2017-03-05T13:46:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA5CWYS70RPAYRNXZ4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f111704-ebb9-46dd-ab65-1ac42996ccc", "eventTime": "2017-03-05T13:46:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA5CWYS70RPAYRNXZ4", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfec55c8-c243-4c92-a0b7-33a0cccc29a0", "record_id": "flaws_cloudtrail:0000294:dfec55c8-c243-4c92-a0b7-33a0cccc29a0", "row_index": 294, "timestamp": "2017-03-05T13:46:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfec55c8-c243-4c92-a0b7-33a0cccc29a0", "eventTime": "2017-03-05T13:46:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98f71ed5-1160-4e85-8d8e-613ced748c4a", "record_id": "flaws_cloudtrail:0000295:98f71ed5-1160-4e85-8d8e-613ced748c4a", "row_index": 295, "timestamp": "2017-03-05T13:46:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98f71ed5-1160-4e85-8d8e-613ced748c4a", "eventTime": "2017-03-05T13:46:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "932ae137-4aa9-4c7b-b25c-3314233257d9", "record_id": "flaws_cloudtrail:0000296:932ae137-4aa9-4c7b-b25c-3314233257d9", "row_index": 296, "timestamp": "2017-03-05T13:46:20Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "932ae137-4aa9-4c7b-b25c-3314233257d9", "eventTime": "2017-03-05T13:46:20Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "910d6b78-dfb4-4cb3-abc3-09fe17e62969", "record_id": "flaws_cloudtrail:0000297:910d6b78-dfb4-4cb3-abc3-09fe17e62969", "row_index": 297, "timestamp": "2017-03-05T13:46:20Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "910d6b78-dfb4-4cb3-abc3-09fe17e62969", "eventTime": "2017-03-05T13:46:20Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e4e30ce-95a4-406a-b535-8cc1b784a941", "record_id": "flaws_cloudtrail:0000298:2e4e30ce-95a4-406a-b535-8cc1b784a941", "row_index": 298, "timestamp": "2017-03-05T13:46:22Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e4e30ce-95a4-406a-b535-8cc1b784a941", "eventTime": "2017-03-05T13:46:22Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6e0df27-6e21-4123-86af-416c14d23cff", "record_id": "flaws_cloudtrail:0000299:a6e0df27-6e21-4123-86af-416c14d23cff", "row_index": 299, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6e0df27-6e21-4123-86af-416c14d23cff", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd6a9a9e-24d6-403a-97e4-2f0df60743cc", "record_id": "flaws_cloudtrail:0000300:fd6a9a9e-24d6-403a-97e4-2f0df60743cc", "row_index": 300, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd6a9a9e-24d6-403a-97e4-2f0df60743cc", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d89f573-03f2-482d-8c84-b354354bd6a", "record_id": "flaws_cloudtrail:0000301:2d89f573-03f2-482d-8c84-b354354bd6a", "row_index": 301, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA7YKC28CBSTV7B0F1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d89f573-03f2-482d-8c84-b354354bd6a", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA7YKC28CBSTV7B0F1", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:23Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cbc7733-2ba1-486d-88f6-32f0714be387", "record_id": "flaws_cloudtrail:0000302:1cbc7733-2ba1-486d-88f6-32f0714be387", "row_index": 302, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cbc7733-2ba1-486d-88f6-32f0714be387", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e161ec1b-478c-4630-8e56-2f7e9b7eb0f4", "record_id": "flaws_cloudtrail:0000303:e161ec1b-478c-4630-8e56-2f7e9b7eb0f4", "row_index": 303, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e161ec1b-478c-4630-8e56-2f7e9b7eb0f4", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "602367c53-6cba-425f-ba2b-f0fff3e9fd44", "record_id": "flaws_cloudtrail:0000304:602367c53-6cba-425f-ba2b-f0fff3e9fd44", "row_index": 304, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "602367c53-6cba-425f-ba2b-f0fff3e9fd44", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5688def-765b-473a-807d-7c301402badb", "record_id": "flaws_cloudtrail:0000305:c5688def-765b-473a-807d-7c301402badb", "row_index": 305, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5688def-765b-473a-807d-7c301402badb", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77449a38-2bd7-4181-98aa-6b2f87e0f79e", "record_id": "flaws_cloudtrail:0000306:77449a38-2bd7-4181-98aa-6b2f87e0f79e", "row_index": 306, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77449a38-2bd7-4181-98aa-6b2f87e0f79e", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4524e80a-ef1f-4552-88d8-7fde3c6abb36", "record_id": "flaws_cloudtrail:0000307:4524e80a-ef1f-4552-88d8-7fde3c6abb36", "row_index": 307, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4524e80a-ef1f-4552-88d8-7fde3c6abb36", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceac6d0f-2661-4be1-9d01-3dab18f16de0", "record_id": "flaws_cloudtrail:0000308:ceac6d0f-2661-4be1-9d01-3dab18f16de0", "row_index": 308, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceac6d0f-2661-4be1-9d01-3dab18f16de0", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ce212d5-408c-49f0-951d-a7bff113559c", "record_id": "flaws_cloudtrail:0000309:6ce212d5-408c-49f0-951d-a7bff113559c", "row_index": 309, "timestamp": "2017-03-05T13:46:23Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ce212d5-408c-49f0-951d-a7bff113559c", "eventTime": "2017-03-05T13:46:23Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2e70fcf-7dd2-4a5c-ad2e-62ea9c29191b", "record_id": "flaws_cloudtrail:0000310:f2e70fcf-7dd2-4a5c-ad2e-62ea9c29191b", "row_index": 310, "timestamp": "2017-03-05T13:46:25Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAO1OV20BQOB2RDCCN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2e70fcf-7dd2-4a5c-ad2e-62ea9c29191b", "eventTime": "2017-03-05T13:46:25Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAO1OV20BQOB2RDCCN", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:23Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b85c9a7b-04e5-473d-b680-0b22bc603bc1", "record_id": "flaws_cloudtrail:0000311:b85c9a7b-04e5-473d-b680-0b22bc603bc1", "row_index": 311, "timestamp": "2017-03-05T13:46:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b85c9a7b-04e5-473d-b680-0b22bc603bc1", "eventTime": "2017-03-05T13:46:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf64142-543d-4a1a-99cd-95be079bb647", "record_id": "flaws_cloudtrail:0000312:bf64142-543d-4a1a-99cd-95be079bb647", "row_index": 312, "timestamp": "2017-03-05T13:46:26Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf64142-543d-4a1a-99cd-95be079bb647", "eventTime": "2017-03-05T13:46:26Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1c7453f-4bfb-484e-909a-d298193fd303", "record_id": "flaws_cloudtrail:0000313:a1c7453f-4bfb-484e-909a-d298193fd303", "row_index": 313, "timestamp": "2017-03-05T13:46:26Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAALPW6VO88NYKAAOW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1c7453f-4bfb-484e-909a-d298193fd303", "eventTime": "2017-03-05T13:46:26Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAALPW6VO88NYKAAOW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T13:46:26Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f64002e7-7d61-4d2d-ae9a-8e20ef836cc9", "record_id": "flaws_cloudtrail:0000314:f64002e7-7d61-4d2d-ae9a-8e20ef836cc9", "row_index": 314, "timestamp": "2017-03-05T13:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f64002e7-7d61-4d2d-ae9a-8e20ef836cc9", "eventTime": "2017-03-05T13:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54e514013-2206-416a-a667-bc819dae672f", "record_id": "flaws_cloudtrail:0000315:54e514013-2206-416a-a667-bc819dae672f", "row_index": 315, "timestamp": "2017-03-05T13:46:26Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54e514013-2206-416a-a667-bc819dae672f", "eventTime": "2017-03-05T13:46:26Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f31c55ec-74f6-453a-9759-9db6783aa03a", "record_id": "flaws_cloudtrail:0000316:f31c55ec-74f6-453a-9759-9db6783aa03a", "row_index": 316, "timestamp": "2017-03-05T13:46:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f31c55ec-74f6-453a-9759-9db6783aa03a", "eventTime": "2017-03-05T13:46:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526974-8d62-4458-989c-4bb07cbb51f5", "record_id": "flaws_cloudtrail:0000317:526974-8d62-4458-989c-4bb07cbb51f5", "row_index": 317, "timestamp": "2017-03-05T13:46:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526974-8d62-4458-989c-4bb07cbb51f5", "eventTime": "2017-03-05T13:46:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb8ef74-87ef-4a21-8826-69277d3a8874", "record_id": "flaws_cloudtrail:0000318:cfb8ef74-87ef-4a21-8826-69277d3a8874", "row_index": 318, "timestamp": "2017-03-05T13:48:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb8ef74-87ef-4a21-8826-69277d3a8874", "eventTime": "2017-03-05T13:48:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13261-499f-451d-b5ae-cb74024bbfcf", "record_id": "flaws_cloudtrail:0000319:13261-499f-451d-b5ae-cb74024bbfcf", "row_index": 319, "timestamp": "2017-03-05T13:48:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13261-499f-451d-b5ae-cb74024bbfcf", "eventTime": "2017-03-05T13:48:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e05d9f2a-f651-4e44-931e-e078ad6d7419", "record_id": "flaws_cloudtrail:0000320:e05d9f2a-f651-4e44-931e-e078ad6d7419", "row_index": 320, "timestamp": "2017-03-05T13:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e05d9f2a-f651-4e44-931e-e078ad6d7419", "eventTime": "2017-03-05T13:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYcEJVd1M3aVJyTlBSR3FGWXlFTE9KVzBvUEZOUFd0eUdiNUQ5dVRPRmJubUdLV0RYRHFFZ3lMVUVMMmg5T0dUaFBRckJRaWx3cUhScVFSSllxMVUzZTFPcFpIbEpyQUg1WUkrakxsVjdPcThBS0QyMXZEMGFrOVcvOWtxb1g3OGtpK2ZneU9kWTA5dVlOTDExSVJNdE82TkoxU3pHR1cxdno5a1o2VGpINFhHcmh0c0g4NTlBalJwczRMayIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "132480c3d-e8c5-49fb-96a9-c5863b5a4cb7", "record_id": "flaws_cloudtrail:0000321:132480c3d-e8c5-49fb-96a9-c5863b5a4cb7", "row_index": 321, "timestamp": "2017-03-05T13:49:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "132480c3d-e8c5-49fb-96a9-c5863b5a4cb7", "eventTime": "2017-03-05T13:49:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQTm5XRWdlZ3Z1akhWUi9DR0dnL2c3Z3htRnhBd0tLdzJWWmhpSjE4amdQLzhJcDJJOVk4V2EvSFV0OFlrZGZwdE5YUWluelAyOU9MQnJhVTNSTGRIOTBWMGIvR1kzUS9pcUdQMFlxY0dIbnVhL0VoUlBWeXN4bzc5L3N5cXFLQUU1L3c4MW9TL051SFB6Z1VaK3BQZmtHazV2V2t4ZUZuNGFKQWw5RTd2R0JRTDR0NlAxc3R6TWJjeFZvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3597f2e3-0a49-405b-9c25-73e0ce69a843", "record_id": "flaws_cloudtrail:0000322:3597f2e3-0a49-405b-9c25-73e0ce69a843", "row_index": 322, "timestamp": "2017-03-05T13:49:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3597f2e3-0a49-405b-9c25-73e0ce69a843", "eventTime": "2017-03-05T13:49:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNM2Rpbm0rRGVrZTMzbHl3NWtkOTgrWWJoemltNkVvbjJrSXo4Mld1RnJ1eHVSNUNYcFBmWjI5VDNwLzAxMzdocHN6aExkTTdGM2tEMjdSUG83SWsvbkZQNXJWSUVJMXNTTllsY3VzbFVrenYzeGp4VThBaWhFL0VEUDdJd0lCbzQ5ODFWZ1VjTTIxR0xUUzh1KzdPdFZTZmd0UFVPSlBrWjFkblZudTVUa0JGWjFybFphMTZONWprSGJ2bE95ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e8756e5-ed47-4f88-8555-fcecd03990f", "record_id": "flaws_cloudtrail:0000323:4e8756e5-ed47-4f88-8555-fcecd03990f", "row_index": 323, "timestamp": "2017-03-05T13:49:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e8756e5-ed47-4f88-8555-fcecd03990f", "eventTime": "2017-03-05T13:49:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2MUgyeVFQSElaVlBxQWgrN2FoVFJmTFA4bElxbWZzaTRrWVFpZXoySHBRZHRSdDY1VGZuNVUwZ2tDQUxHaUxRa2J2dmNOODQ0VmlpUDdyVDFyMVEzRFlHNndXZ2d0cndlTHNjZ1F3cFZpVi9sa1drMC9vUFBzUU81VjF4Nm5YK05rNEwwV3N6NzE1TWFyQXF5VmdxZXBRQ0RYRFVIR1VsLzFUK0o5bnRMRnpGTU9qd3RmbEZ3L0NiK3V6WiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58cdae80-5d88-429d-9c87-569c987c47b9", "record_id": "flaws_cloudtrail:0000324:58cdae80-5d88-429d-9c87-569c987c47b9", "row_index": 324, "timestamp": "2017-03-05T13:49:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58cdae80-5d88-429d-9c87-569c987c47b9", "eventTime": "2017-03-05T13:49:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLQWxXN2ZlQ09FNkxZcXB6a0Q1VUY3OEllR0ZCcjI4bWRacEpNeTdVQWpJQ0YwSlFlRzV1YkFPRlBjR0Q4SjZ6VFNYNTg2NXovZVdCMFc1SFdyMlM1VWZSZGZrNTRaVXVWenFkdlZuOTdEbzBqcDVHMFluTTZLRUpJNkFMa25yYzRSV1FPWHRha2w0NmM4SEVwMm5udkxLUm4yUnovbjdmaHZwVEtCWmZER0l2TVRrVGN0VEE1SGM0V29ZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd2ceeb5-3787-4e8d-b182-ad72ac3a3e88", "record_id": "flaws_cloudtrail:0000325:fd2ceeb5-3787-4e8d-b182-ad72ac3a3e88", "row_index": 325, "timestamp": "2017-03-05T13:49:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd2ceeb5-3787-4e8d-b182-ad72ac3a3e88", "eventTime": "2017-03-05T13:49:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNm0yQlJ6TlhBU2t6UDdiMXdkVmVHSDM5RU9IKyt3RlVZbnEwRktXZGNLNDJsMmg2am83R2VURXYwbENhbFRQUTFnQktGMnF0OFIva3phempBN1J1U1ViS1lpUkwvb2ZJUktYUlE3WHYwR0o3R1RuYzNVVWp2ZmhHdU5lYWNTSkRESnFXanlJNU5ueUJtYVQ1bXVjcGVQcWJtdkpJb1d2SzF4bVhEcDlwS0t2Q0RkNlJDMUI5RVQzM2pHbyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79191c46-57ed-491c-ade1-6ae8aa540e6a", "record_id": "flaws_cloudtrail:0000326:79191c46-57ed-491c-ade1-6ae8aa540e6a", "row_index": 326, "timestamp": "2017-03-05T13:49:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79191c46-57ed-491c-ade1-6ae8aa540e6a", "eventTime": "2017-03-05T13:49:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzcVZ4VWtKUlJmQ1Z0d1hHV3J1bWNtYXNweWhhcHlCcmlxT3N3dHBCR2xFeEdlYy9YdTk4SHpaYmFsWmE1cEVpV0pmNFozYTRxVlBxek1xdnpnTlFLdWhEOVRva3N1Y2pQZXFCNlg2RjBvNXF0V2ErVTBhbXdpM090SlQrN0UrYm9vT0ljQnp0eVlreTVYWHpHcDJLeXJBY2pHTGgxUGtMUU1tckVuNVpyMitROWtKYXFIcUlHVlc1YmlDRiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "888910-0ca5-4da9-bca4-71849b71fe55", "record_id": "flaws_cloudtrail:0000327:888910-0ca5-4da9-bca4-71849b71fe55", "row_index": 327, "timestamp": "2017-03-05T13:49:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "888910-0ca5-4da9-bca4-71849b71fe55", "eventTime": "2017-03-05T13:49:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e48906-f1f8-4c7a-b576-85343a8849f4", "record_id": "flaws_cloudtrail:0000328:e48906-f1f8-4c7a-b576-85343a8849f4", "row_index": 328, "timestamp": "2017-03-05T13:50:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e48906-f1f8-4c7a-b576-85343a8849f4", "eventTime": "2017-03-05T13:50:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ead1831-1286-4b2b-8ced-6f36d2ebe791", "record_id": "flaws_cloudtrail:0000329:8ead1831-1286-4b2b-8ced-6f36d2ebe791", "row_index": 329, "timestamp": "2017-03-05T13:51:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ead1831-1286-4b2b-8ced-6f36d2ebe791", "eventTime": "2017-03-05T13:51:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072600-12c0-45f5-83f6-4ac84e611182f", "record_id": "flaws_cloudtrail:0000330:072600-12c0-45f5-83f6-4ac84e611182f", "row_index": 330, "timestamp": "2017-03-05T13:51:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072600-12c0-45f5-83f6-4ac84e611182f", "eventTime": "2017-03-05T13:51:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e895f408-63d8-4c9f-9aee-b89edaad98a2", "record_id": "flaws_cloudtrail:0000331:e895f408-63d8-4c9f-9aee-b89edaad98a2", "row_index": 331, "timestamp": "2017-03-05T13:51:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e895f408-63d8-4c9f-9aee-b89edaad98a2", "eventTime": "2017-03-05T13:51:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3b136fb-583d-47b3-8495-1929cf7e888b", "record_id": "flaws_cloudtrail:0000332:f3b136fb-583d-47b3-8495-1929cf7e888b", "row_index": 332, "timestamp": "2017-03-05T13:58:49Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3b136fb-583d-47b3-8495-1929cf7e888b", "eventTime": "2017-03-05T13:58:49Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "errorCode": "Client.InvalidRequest", "errorMessage": "The request received was invalid.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26fc3b46-62f2-4f79-ab65-7dc81f27e2c0", "record_id": "flaws_cloudtrail:0000333:26fc3b46-62f2-4f79-ab65-7dc81f27e2c0", "row_index": 333, "timestamp": "2017-03-05T13:59:05Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26fc3b46-62f2-4f79-ab65-7dc81f27e2c0", "eventTime": "2017-03-05T13:59:05Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSnapshot.NotFound", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daee4c30-8bf9-4dec-a4d7-936bb243b60e", "record_id": "flaws_cloudtrail:0000334:daee4c30-8bf9-4dec-a4d7-936bb243b60e", "row_index": 334, "timestamp": "2017-03-05T13:59:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASVNTVZDHWSN61EXO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.74.36.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 512, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daee4c30-8bf9-4dec-a4d7-936bb243b60e", "eventTime": "2017-03-05T13:59:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.74.36.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASVNTVZDHWSN61EXO", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9a4923b-e0b8-450e-8d60-dafac9f80864", "record_id": "flaws_cloudtrail:0000335:a9a4923b-e0b8-450e-8d60-dafac9f80864", "row_index": 335, "timestamp": "2017-03-05T14:00:30Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASVNTVZDHWSN61EXO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.74.36.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 541, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9a4923b-e0b8-450e-8d60-dafac9f80864", "eventTime": "2017-03-05T14:00:30Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.74.36.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASVNTVZDHWSN61EXO", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afe8e75d-9029-41fd-a4df-682c511428cb", "record_id": "flaws_cloudtrail:0000336:afe8e75d-9029-41fd-a4df-682c511428cb", "row_index": 336, "timestamp": "2017-03-05T14:01:27Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afe8e75d-9029-41fd-a4df-682c511428cb", "eventTime": "2017-03-05T14:01:27Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSnapshot.NotFound", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3d72ee2-8069-4be9-baa1-532ce410cd2f", "record_id": "flaws_cloudtrail:0000337:a3d72ee2-8069-4be9-baa1-532ce410cd2f", "row_index": 337, "timestamp": "2017-03-05T14:02:13Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASVNTVZDHWSN61EXO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.74.36.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 561, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3d72ee2-8069-4be9-baa1-532ce410cd2f", "eventTime": "2017-03-05T14:02:13Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.74.36.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASVNTVZDHWSN61EXO", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "703734cd9-1f87-4a13-ab97-da023c5110e6", "record_id": "flaws_cloudtrail:0000338:703734cd9-1f87-4a13-ab97-da023c5110e6", "row_index": 338, "timestamp": "2017-03-05T14:02:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "703734cd9-1f87-4a13-ab97-da023c5110e6", "eventTime": "2017-03-05T14:02:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e630fb2-f9d7-4e30-a47c-00bbd937e078", "record_id": "flaws_cloudtrail:0000339:2e630fb2-f9d7-4e30-a47c-00bbd937e078", "row_index": 339, "timestamp": "2017-03-05T14:02:38Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e630fb2-f9d7-4e30-a47c-00bbd937e078", "eventTime": "2017-03-05T14:02:38Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSnapshot.NotFound", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-2a0b3b47", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c155062-e1f7-476c-9a95-f8014df541c1", "record_id": "flaws_cloudtrail:0000340:2c155062-e1f7-476c-9a95-f8014df541c1", "row_index": 340, "timestamp": "2017-03-05T14:03:20Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASVNTVZDHWSN61EXO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.74.36.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c155062-e1f7-476c-9a95-f8014df541c1", "eventTime": "2017-03-05T14:03:20Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.74.36.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASVNTVZDHWSN61EXO", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e52ef43-4d95-4153-b000-819271fd79852", "record_id": "flaws_cloudtrail:0000341:2e52ef43-4d95-4153-b000-819271fd79852", "row_index": 341, "timestamp": "2017-03-05T14:09:32Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e52ef43-4d95-4153-b000-819271fd79852", "eventTime": "2017-03-05T14:09:32Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "aws-cli/1.10.54 Python/2.7.6 Linux/3.19.0-32-generic botocore/1.4.44", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390adc81-9c79-4d35-abf7-282f249be415", "record_id": "flaws_cloudtrail:0000342:390adc81-9c79-4d35-abf7-282f249be415", "row_index": 342, "timestamp": "2017-03-05T14:10:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASVNTVZDHWSN61EXO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.74.36.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/backup-elevated-45"], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390adc81-9c79-4d35-abf7-282f249be415", "eventTime": "2017-03-05T14:10:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.74.36.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASVNTVZDHWSN61EXO", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/backup-elevated-45", "roleSessionName": "backup-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/backup-elevated-45"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8bbd74c-17be-4c23-a8d7-2f927ec1b199", "record_id": "flaws_cloudtrail:0000343:f8bbd74c-17be-4c23-a8d7-2f927ec1b199", "row_index": 343, "timestamp": "2017-03-05T14:12:17Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIASVNTVZDHWSN61EXO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.74.36.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1110"], "raw_record_size_bytes": 631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8bbd74c-17be-4c23-a8d7-2f927ec1b199", "eventTime": "2017-03-05T14:12:17Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.74.36.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIASVNTVZDHWSN61EXO", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-1110", "key": "reports/314.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1110"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96a5aa4d-17ec-4e07-8056-747184b4a735b", "record_id": "flaws_cloudtrail:0000344:96a5aa4d-17ec-4e07-8056-747184b4a735b", "row_index": 344, "timestamp": "2017-03-05T14:23:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96a5aa4d-17ec-4e07-8056-747184b4a735b", "eventTime": "2017-03-05T14:23:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c954e2-d6ed-4b71-a8e4-68e6a4ba9397", "record_id": "flaws_cloudtrail:0000345:e6c954e2-d6ed-4b71-a8e4-68e6a4ba9397", "row_index": 345, "timestamp": "2017-03-05T14:24:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c954e2-d6ed-4b71-a8e4-68e6a4ba9397", "eventTime": "2017-03-05T14:24:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21bd71c8-fcb3-4dfe-8857-7745ea8b5b19", "record_id": "flaws_cloudtrail:0000346:21bd71c8-fcb3-4dfe-8857-7745ea8b5b19", "row_index": 346, "timestamp": "2017-03-05T14:25:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21bd71c8-fcb3-4dfe-8857-7745ea8b5b19", "eventTime": "2017-03-05T14:25:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf139f78-b93a-4a02-ae12-692dd097b20a", "record_id": "flaws_cloudtrail:0000347:bf139f78-b93a-4a02-ae12-692dd097b20a", "row_index": 347, "timestamp": "2017-03-05T14:26:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf139f78-b93a-4a02-ae12-692dd097b20a", "eventTime": "2017-03-05T14:26:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e0657a3-3ea6-43a2-a09e-1405fa7c777c", "record_id": "flaws_cloudtrail:0000348:7e0657a3-3ea6-43a2-a09e-1405fa7c777c", "row_index": 348, "timestamp": "2017-03-05T14:27:12Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e0657a3-3ea6-43a2-a09e-1405fa7c777c", "eventTime": "2017-03-05T14:27:12Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eba675681-4dec-46f5-8969-25fe299027", "record_id": "flaws_cloudtrail:0000349:eba675681-4dec-46f5-8969-25fe299027", "row_index": 349, "timestamp": "2017-03-05T14:28:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eba675681-4dec-46f5-8969-25fe299027", "eventTime": "2017-03-05T14:28:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "999e292b-8357-432c-a5f6-118fee9c8c36", "record_id": "flaws_cloudtrail:0000350:999e292b-8357-432c-a5f6-118fee9c8c36", "row_index": 350, "timestamp": "2017-03-05T14:29:10Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "999e292b-8357-432c-a5f6-118fee9c8c36", "eventTime": "2017-03-05T14:29:10Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efd5e155-fd18-4d5e-94e0-531309cf3c9e3", "record_id": "flaws_cloudtrail:0000351:efd5e155-fd18-4d5e-94e0-531309cf3c9e3", "row_index": 351, "timestamp": "2017-03-05T14:29:34Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "54.213.55.201", "user_agent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efd5e155-fd18-4d5e-94e0-531309cf3c9e3", "eventTime": "2017-03-05T14:29:34Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "54.213.55.201", "userAgent": "aws-cli/1.11.56 Python/2.7.13 Linux/4.9.0-kali2-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b690444-abf3-49b5-b924-0255afc33079", "record_id": "flaws_cloudtrail:0000352:9b690444-abf3-49b5-b924-0255afc33079", "row_index": 352, "timestamp": "2017-03-05T14:29:55Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAE2LWPCD1YDU3ZTHS", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.37.201.243", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b690444-abf3-49b5-b924-0255afc33079", "eventTime": "2017-03-05T14:29:55Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.37.201.243", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAE2LWPCD1YDU3ZTHS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:29:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2017/03/05/[$LATEST]5f15b6a1df5fdb047a4df1dbd8e0b6f6", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d6cc65d-1941-406b-a847-9d55eea525363", "record_id": "flaws_cloudtrail:0000353:8d6cc65d-1941-406b-a847-9d55eea525363", "row_index": 353, "timestamp": "2017-03-05T14:29:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1226, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d6cc65d-1941-406b-a847-9d55eea525363", "eventTime": "2017-03-05T14:29:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE2LWPCD1YDU3ZTHS", "expiration": "Mar 6, 2017 2:29:55 AM", "sessionToken": "FQoDYXdzENj//////////wEaDEZbe08gOxl4eZUMtSLfAdjLrP9nVbIay3Bd/civTFbgheS0pp/nwgSQPGEN+oE4t1pGaABvN9jWl3iBiNmhi/1sRPW3dxrAnUpslzg7QeKi7d+HmIhAovkG3LrlUPWdZVMau6GiejX7Sqb6UPY6hRfH6ubTBykqppRhtlrVWhdwUuL/YzyRKDHondIHL2lV/iUFZ8FROk0AMwN/ebqlk5RutlsyVinwrzmeli5IbGuw+AazvcioIRUUo9UPJc7cSBP42RB7horysSz61RqvHgl9TFQsSNpZFi5JYmKxq3KuOriZzyI3bUicSKK1y60o48HwxQU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18fd8cf-3227-430f-9eb8-e0c28cdd0bab", "record_id": "flaws_cloudtrail:0000354:f18fd8cf-3227-430f-9eb8-e0c28cdd0bab", "row_index": 354, "timestamp": "2017-03-05T14:31:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1487, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18fd8cf-3227-430f-9eb8-e0c28cdd0bab", "eventTime": "2017-03-05T14:31:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFNBZCXRABBC92TDQ", "expiration": "Mar 5, 2017 8:58:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94e35b9f-e788-4353-8975-a82d4bd608f3", "record_id": "flaws_cloudtrail:0000355:94e35b9f-e788-4353-8975-a82d4bd608f3", "row_index": 355, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94e35b9f-e788-4353-8975-a82d4bd608f3", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e4d09fd-5804-4c95-a5be-4e69a493c9ed", "record_id": "flaws_cloudtrail:0000356:4e4d09fd-5804-4c95-a5be-4e69a493c9ed", "row_index": 356, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e4d09fd-5804-4c95-a5be-4e69a493c9ed", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "781402f-cad5-495a-ad19-2697fbd9a1e6", "record_id": "flaws_cloudtrail:0000357:781402f-cad5-495a-ad19-2697fbd9a1e6", "row_index": 357, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "781402f-cad5-495a-ad19-2697fbd9a1e6", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7548d842-47f1-45de-bb57-6ebc8ed0ad2c", "record_id": "flaws_cloudtrail:0000358:7548d842-47f1-45de-bb57-6ebc8ed0ad2c", "row_index": 358, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7548d842-47f1-45de-bb57-6ebc8ed0ad2c", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8815f552-a672-4930-bd60-a7d99a00da54", "record_id": "flaws_cloudtrail:0000359:8815f552-a672-4930-bd60-a7d99a00da54", "row_index": 359, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8815f552-a672-4930-bd60-a7d99a00da54", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f65e8497-accf-4eff-8de0-b5a2041ee3c8", "record_id": "flaws_cloudtrail:0000360:f65e8497-accf-4eff-8de0-b5a2041ee3c8", "row_index": 360, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f65e8497-accf-4eff-8de0-b5a2041ee3c8", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe302da7-1cf6-4d82-b043-17d4f605d3d1", "record_id": "flaws_cloudtrail:0000361:fe302da7-1cf6-4d82-b043-17d4f605d3d1", "row_index": 361, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe302da7-1cf6-4d82-b043-17d4f605d3d1", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b3f68dc-e86e-414c-beda-e14a6bd3c2d5", "record_id": "flaws_cloudtrail:0000362:0b3f68dc-e86e-414c-beda-e14a6bd3c2d5", "row_index": 362, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b3f68dc-e86e-414c-beda-e14a6bd3c2d5", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359d33c5-2ec5-4e93-aa20-ec0545a6ae0d", "record_id": "flaws_cloudtrail:0000363:359d33c5-2ec5-4e93-aa20-ec0545a6ae0d", "row_index": 363, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359d33c5-2ec5-4e93-aa20-ec0545a6ae0d", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4dcc42c-69b1-4060-b6ed-e7992f1e2c61", "record_id": "flaws_cloudtrail:0000364:d4dcc42c-69b1-4060-b6ed-e7992f1e2c61", "row_index": 364, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4dcc42c-69b1-4060-b6ed-e7992f1e2c61", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b29323e4-e950-43f4-86b4-5dbdcc738fbf", "record_id": "flaws_cloudtrail:0000365:b29323e4-e950-43f4-86b4-5dbdcc738fbf", "row_index": 365, "timestamp": "2017-03-05T14:53:36Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b29323e4-e950-43f4-86b4-5dbdcc738fbf", "eventTime": "2017-03-05T14:53:36Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd94fb49-3cc3-414c-a436-7e14ef3845bb", "record_id": "flaws_cloudtrail:0000366:cd94fb49-3cc3-414c-a436-7e14ef3845bb", "row_index": 366, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd94fb49-3cc3-414c-a436-7e14ef3845bb", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e967934-16a7-479e-8e25-8ac4f0cb79e9", "record_id": "flaws_cloudtrail:0000367:9e967934-16a7-479e-8e25-8ac4f0cb79e9", "row_index": 367, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e967934-16a7-479e-8e25-8ac4f0cb79e9", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81808beb-d00f-4cbc-98fd-0db9f7bf522c", "record_id": "flaws_cloudtrail:0000368:81808beb-d00f-4cbc-98fd-0db9f7bf522c", "row_index": 368, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81808beb-d00f-4cbc-98fd-0db9f7bf522c", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00212-fa6e-440b-b71e-acab391625b9", "record_id": "flaws_cloudtrail:0000369:00212-fa6e-440b-b71e-acab391625b9", "row_index": 369, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00212-fa6e-440b-b71e-acab391625b9", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c497dae6-cfb9-45a8-9d56-bb7aa39a5a8a", "record_id": "flaws_cloudtrail:0000370:c497dae6-cfb9-45a8-9d56-bb7aa39a5a8a", "row_index": 370, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c497dae6-cfb9-45a8-9d56-bb7aa39a5a8a", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "358966-cf0a-407e-976f-0d189588d434", "record_id": "flaws_cloudtrail:0000371:358966-cf0a-407e-976f-0d189588d434", "row_index": 371, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "358966-cf0a-407e-976f-0d189588d434", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20c51a06-f958-4130-9296-f9ea95d9c36d", "record_id": "flaws_cloudtrail:0000372:20c51a06-f958-4130-9296-f9ea95d9c36d", "row_index": 372, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20c51a06-f958-4130-9296-f9ea95d9c36d", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7e9a9ae-78d6-460f-8139-db930749e10", "record_id": "flaws_cloudtrail:0000373:b7e9a9ae-78d6-460f-8139-db930749e10", "row_index": 373, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7e9a9ae-78d6-460f-8139-db930749e10", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c3e0c62-3ecc-42ce-a820-5d11813db2ad", "record_id": "flaws_cloudtrail:0000374:3c3e0c62-3ecc-42ce-a820-5d11813db2ad", "row_index": 374, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c3e0c62-3ecc-42ce-a820-5d11813db2ad", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea67e26-5989-4493-ab76-788c1112b70f", "record_id": "flaws_cloudtrail:0000375:fea67e26-5989-4493-ab76-788c1112b70f", "row_index": 375, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea67e26-5989-4493-ab76-788c1112b70f", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "735988b5a-43ac-4dc2-a873-c403aca2baf2", "record_id": "flaws_cloudtrail:0000376:735988b5a-43ac-4dc2-a873-c403aca2baf2", "row_index": 376, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "735988b5a-43ac-4dc2-a873-c403aca2baf2", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad020c72-3f2e-4838-923c-d6925b8b721d", "record_id": "flaws_cloudtrail:0000377:ad020c72-3f2e-4838-923c-d6925b8b721d", "row_index": 377, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad020c72-3f2e-4838-923c-d6925b8b721d", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb292e41-b0a5-4fd3-bf64-d08fba33d6b6", "record_id": "flaws_cloudtrail:0000378:fb292e41-b0a5-4fd3-bf64-d08fba33d6b6", "row_index": 378, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb292e41-b0a5-4fd3-bf64-d08fba33d6b6", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed08006-3a65-4edd-9b80-9e0b12e7ba94", "record_id": "flaws_cloudtrail:0000379:aed08006-3a65-4edd-9b80-9e0b12e7ba94", "row_index": 379, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed08006-3a65-4edd-9b80-9e0b12e7ba94", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31552e59-63dd-4b31-ad19-7ebbd1e78ae8", "record_id": "flaws_cloudtrail:0000380:31552e59-63dd-4b31-ad19-7ebbd1e78ae8", "row_index": 380, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31552e59-63dd-4b31-ad19-7ebbd1e78ae8", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74e9c71-f8f0-44ca-b298-5a32e2e0c2f3", "record_id": "flaws_cloudtrail:0000381:b74e9c71-f8f0-44ca-b298-5a32e2e0c2f3", "row_index": 381, "timestamp": "2017-03-05T14:53:37Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74e9c71-f8f0-44ca-b298-5a32e2e0c2f3", "eventTime": "2017-03-05T14:53:37Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f0929d9-80cf-4ee9-8c73-c0fa1425dc9d", "record_id": "flaws_cloudtrail:0000382:4f0929d9-80cf-4ee9-8c73-c0fa1425dc9d", "row_index": 382, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f0929d9-80cf-4ee9-8c73-c0fa1425dc9d", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab14cd7e-845d-4e54-9c82-8bd0b22ef85a", "record_id": "flaws_cloudtrail:0000383:ab14cd7e-845d-4e54-9c82-8bd0b22ef85a", "row_index": 383, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab14cd7e-845d-4e54-9c82-8bd0b22ef85a", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf66d0a2-84fe-4b35-bf2a-b93e0792b9b5", "record_id": "flaws_cloudtrail:0000384:bf66d0a2-84fe-4b35-bf2a-b93e0792b9b5", "row_index": 384, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf66d0a2-84fe-4b35-bf2a-b93e0792b9b5", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d813a998-72bd-476f-b501-d1d11a703021d", "record_id": "flaws_cloudtrail:0000385:d813a998-72bd-476f-b501-d1d11a703021d", "row_index": 385, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d813a998-72bd-476f-b501-d1d11a703021d", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d155d0c-c7e6-4d77-b8ae-ecc55ee1b469", "record_id": "flaws_cloudtrail:0000386:9d155d0c-c7e6-4d77-b8ae-ecc55ee1b469", "row_index": 386, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d155d0c-c7e6-4d77-b8ae-ecc55ee1b469", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23bc0a0a-fae9-4f98-9735-64702c49ee51", "record_id": "flaws_cloudtrail:0000387:23bc0a0a-fae9-4f98-9735-64702c49ee51", "row_index": 387, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23bc0a0a-fae9-4f98-9735-64702c49ee51", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fe72df9-19a0-4fc8-b88c-5b5da83a7495", "record_id": "flaws_cloudtrail:0000388:6fe72df9-19a0-4fc8-b88c-5b5da83a7495", "row_index": 388, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fe72df9-19a0-4fc8-b88c-5b5da83a7495", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a5453ed-cd1f-4b10-988a-c80d2c7b8979", "record_id": "flaws_cloudtrail:0000389:0a5453ed-cd1f-4b10-988a-c80d2c7b8979", "row_index": 389, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a5453ed-cd1f-4b10-988a-c80d2c7b8979", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571d980e-98c6-4298-9179-52831fdd3d", "record_id": "flaws_cloudtrail:0000390:571d980e-98c6-4298-9179-52831fdd3d", "row_index": 390, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571d980e-98c6-4298-9179-52831fdd3d", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5de7b41-4d85-4ae5-8200-3416e68efedf", "record_id": "flaws_cloudtrail:0000391:b5de7b41-4d85-4ae5-8200-3416e68efedf", "row_index": 391, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5de7b41-4d85-4ae5-8200-3416e68efedf", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c049dd6-7c72-4e7e-8f86-18a618d3319d", "record_id": "flaws_cloudtrail:0000392:0c049dd6-7c72-4e7e-8f86-18a618d3319d", "row_index": 392, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c049dd6-7c72-4e7e-8f86-18a618d3319d", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0784aec8-d6c9-44fd-a7eb-aab35d67068f", "record_id": "flaws_cloudtrail:0000393:0784aec8-d6c9-44fd-a7eb-aab35d67068f", "row_index": 393, "timestamp": "2017-03-05T14:53:38Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0784aec8-d6c9-44fd-a7eb-aab35d67068f", "eventTime": "2017-03-05T14:53:38Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6345ae82-01f0-4fd8-b19a-137670fe1949", "record_id": "flaws_cloudtrail:0000394:6345ae82-01f0-4fd8-b19a-137670fe1949", "row_index": 394, "timestamp": "2017-03-05T14:53:39Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6345ae82-01f0-4fd8-b19a-137670fe1949", "eventTime": "2017-03-05T14:53:39Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3253b750-f06e-4690-b198-fb68d5840e38", "record_id": "flaws_cloudtrail:0000395:3253b750-f06e-4690-b198-fb68d5840e38", "row_index": 395, "timestamp": "2017-03-05T14:53:39Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3253b750-f06e-4690-b198-fb68d5840e38", "eventTime": "2017-03-05T14:53:39Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff500b77-5597-44a7-9714-238b680d023b", "record_id": "flaws_cloudtrail:0000396:ff500b77-5597-44a7-9714-238b680d023b", "row_index": 396, "timestamp": "2017-03-05T14:53:39Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff500b77-5597-44a7-9714-238b680d023b", "eventTime": "2017-03-05T14:53:39Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e25491-dc28-413c-b533-51c8c147a82e", "record_id": "flaws_cloudtrail:0000397:36e25491-dc28-413c-b533-51c8c147a82e", "row_index": 397, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e25491-dc28-413c-b533-51c8c147a82e", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "726c436e-00b6-4ce8-a856-e3395b800422c", "record_id": "flaws_cloudtrail:0000398:726c436e-00b6-4ce8-a856-e3395b800422c", "row_index": 398, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "726c436e-00b6-4ce8-a856-e3395b800422c", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e103670-16af-45c2-a572-853fe37c8de1", "record_id": "flaws_cloudtrail:0000399:7e103670-16af-45c2-a572-853fe37c8de1", "row_index": 399, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e103670-16af-45c2-a572-853fe37c8de1", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0e491a-4f94-4816-ac39-ce9b8808fd28", "record_id": "flaws_cloudtrail:0000400:ea0e491a-4f94-4816-ac39-ce9b8808fd28", "row_index": 400, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0e491a-4f94-4816-ac39-ce9b8808fd28", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b81a4d66-4af1-41e9-9e1b-e25ef6b9c67d", "record_id": "flaws_cloudtrail:0000401:b81a4d66-4af1-41e9-9e1b-e25ef6b9c67d", "row_index": 401, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b81a4d66-4af1-41e9-9e1b-e25ef6b9c67d", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d054aa4-963e-4b02-b68d-17ae6f988a52", "record_id": "flaws_cloudtrail:0000402:2d054aa4-963e-4b02-b68d-17ae6f988a52", "row_index": 402, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d054aa4-963e-4b02-b68d-17ae6f988a52", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36547c-7f6e-4269-9d50-24f92f3100af", "record_id": "flaws_cloudtrail:0000403:36547c-7f6e-4269-9d50-24f92f3100af", "row_index": 403, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36547c-7f6e-4269-9d50-24f92f3100af", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5b4fc6-fb83-49f6-9ea3-1e7544d2578d", "record_id": "flaws_cloudtrail:0000404:9d5b4fc6-fb83-49f6-9ea3-1e7544d2578d", "row_index": 404, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5b4fc6-fb83-49f6-9ea3-1e7544d2578d", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692cc621-3fe0-4440-b1c0-00f612731", "record_id": "flaws_cloudtrail:0000405:692cc621-3fe0-4440-b1c0-00f612731", "row_index": 405, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692cc621-3fe0-4440-b1c0-00f612731", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e968243-2b11-4d76-92e5-be5bff5c10e4", "record_id": "flaws_cloudtrail:0000406:e968243-2b11-4d76-92e5-be5bff5c10e4", "row_index": 406, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e968243-2b11-4d76-92e5-be5bff5c10e4", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d810ae17-e68e-4db3-9790-e79bdc0024b3", "record_id": "flaws_cloudtrail:0000407:d810ae17-e68e-4db3-9790-e79bdc0024b3", "row_index": 407, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d810ae17-e68e-4db3-9790-e79bdc0024b3", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "add805b0-79a9-4217-97ea-b3d3dacb7b86", "record_id": "flaws_cloudtrail:0000408:add805b0-79a9-4217-97ea-b3d3dacb7b86", "row_index": 408, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "add805b0-79a9-4217-97ea-b3d3dacb7b86", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea78471-f728-4c60-8179-2f256010c78be", "record_id": "flaws_cloudtrail:0000409:ea78471-f728-4c60-8179-2f256010c78be", "row_index": 409, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea78471-f728-4c60-8179-2f256010c78be", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75edccc2-1913-4f7e-b249-d693460bb7751", "record_id": "flaws_cloudtrail:0000410:75edccc2-1913-4f7e-b249-d693460bb7751", "row_index": 410, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75edccc2-1913-4f7e-b249-d693460bb7751", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28bacf78-18dd-422e-857d-146282672063", "record_id": "flaws_cloudtrail:0000411:28bacf78-18dd-422e-857d-146282672063", "row_index": 411, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28bacf78-18dd-422e-857d-146282672063", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6167e444-427b-4761-be27-381ed294292", "record_id": "flaws_cloudtrail:0000412:6167e444-427b-4761-be27-381ed294292", "row_index": 412, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6167e444-427b-4761-be27-381ed294292", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43dd5d32-77e3-46e7-aeaf-37c6f3890471", "record_id": "flaws_cloudtrail:0000413:43dd5d32-77e3-46e7-aeaf-37c6f3890471", "row_index": 413, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43dd5d32-77e3-46e7-aeaf-37c6f3890471", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58be6e96-06d9-4336-b49a-9b78851e5e44", "record_id": "flaws_cloudtrail:0000414:58be6e96-06d9-4336-b49a-9b78851e5e44", "row_index": 414, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58be6e96-06d9-4336-b49a-9b78851e5e44", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3fcfc92-51e4-4261-811d-a1bfc320c1c4", "record_id": "flaws_cloudtrail:0000415:e3fcfc92-51e4-4261-811d-a1bfc320c1c4", "row_index": 415, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3fcfc92-51e4-4261-811d-a1bfc320c1c4", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ed5f6fb-dd17-4d3a-ae79-5531d56d823c", "record_id": "flaws_cloudtrail:0000416:2ed5f6fb-dd17-4d3a-ae79-5531d56d823c", "row_index": 416, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ed5f6fb-dd17-4d3a-ae79-5531d56d823c", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1d980489-8486-47fd-af2a-c9c963ae62c5", "record_id": "flaws_cloudtrail:0000417:a1d980489-8486-47fd-af2a-c9c963ae62c5", "row_index": 417, "timestamp": "2017-03-05T14:53:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1d980489-8486-47fd-af2a-c9c963ae62c5", "eventTime": "2017-03-05T14:53:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b3e1c2-67f9-42b6-b3d1-8591f89abed7", "record_id": "flaws_cloudtrail:0000418:c6b3e1c2-67f9-42b6-b3d1-8591f89abed7", "row_index": 418, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b3e1c2-67f9-42b6-b3d1-8591f89abed7", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef7eb32-6af1-436e-acb2-825472dc032104", "record_id": "flaws_cloudtrail:0000419:7ef7eb32-6af1-436e-acb2-825472dc032104", "row_index": 419, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef7eb32-6af1-436e-acb2-825472dc032104", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fc7fe2-ce71-44fa-9968-a701183cc8717", "record_id": "flaws_cloudtrail:0000420:28fc7fe2-ce71-44fa-9968-a701183cc8717", "row_index": 420, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fc7fe2-ce71-44fa-9968-a701183cc8717", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206d02f6-bd96-4a8f-aab5-5d7e52a09002", "record_id": "flaws_cloudtrail:0000421:206d02f6-bd96-4a8f-aab5-5d7e52a09002", "row_index": 421, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206d02f6-bd96-4a8f-aab5-5d7e52a09002", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d3b81ac-cdb5-4769-8253-1e57b0f95d4c", "record_id": "flaws_cloudtrail:0000422:3d3b81ac-cdb5-4769-8253-1e57b0f95d4c", "row_index": 422, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d3b81ac-cdb5-4769-8253-1e57b0f95d4c", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e26c78-a4fa-4540-979c-4d15106204a6", "record_id": "flaws_cloudtrail:0000423:e8e26c78-a4fa-4540-979c-4d15106204a6", "row_index": 423, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e26c78-a4fa-4540-979c-4d15106204a6", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "433b0b6a-0fe7-4fbe-8659-a73832a875b1", "record_id": "flaws_cloudtrail:0000424:433b0b6a-0fe7-4fbe-8659-a73832a875b1", "row_index": 424, "timestamp": "2017-03-05T14:53:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "433b0b6a-0fe7-4fbe-8659-a73832a875b1", "eventTime": "2017-03-05T14:53:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63d329d3-bf66-4d31-81c1-d584c92c157d", "record_id": "flaws_cloudtrail:0000425:63d329d3-bf66-4d31-81c1-d584c92c157d", "row_index": 425, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63d329d3-bf66-4d31-81c1-d584c92c157d", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "857599-a8ca-41e2-b855-bd4c7ee5f470", "record_id": "flaws_cloudtrail:0000426:857599-a8ca-41e2-b855-bd4c7ee5f470", "row_index": 426, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "857599-a8ca-41e2-b855-bd4c7ee5f470", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99517c2-0abf-4f73-9ce8-fd513550fd1ee", "record_id": "flaws_cloudtrail:0000427:99517c2-0abf-4f73-9ce8-fd513550fd1ee", "row_index": 427, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99517c2-0abf-4f73-9ce8-fd513550fd1ee", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be95a37-a733-46e7-b9e4-dae3ff9345ea", "record_id": "flaws_cloudtrail:0000428:6be95a37-a733-46e7-b9e4-dae3ff9345ea", "row_index": 428, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be95a37-a733-46e7-b9e4-dae3ff9345ea", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d019109a-2d65-48db-99c9-4ea691b89f2f", "record_id": "flaws_cloudtrail:0000429:d019109a-2d65-48db-99c9-4ea691b89f2f", "row_index": 429, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d019109a-2d65-48db-99c9-4ea691b89f2f", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45d0ec3e-df7c-42ee-823d-f504e356460a", "record_id": "flaws_cloudtrail:0000430:45d0ec3e-df7c-42ee-823d-f504e356460a", "row_index": 430, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45d0ec3e-df7c-42ee-823d-f504e356460a", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d619dcc-4cdd-4715-9bca-c9d978ad09af", "record_id": "flaws_cloudtrail:0000431:4d619dcc-4cdd-4715-9bca-c9d978ad09af", "row_index": 431, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d619dcc-4cdd-4715-9bca-c9d978ad09af", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68fa1c12-c7ce-4c7f-a78e-6d76e2ff58f5", "record_id": "flaws_cloudtrail:0000432:68fa1c12-c7ce-4c7f-a78e-6d76e2ff58f5", "row_index": 432, "timestamp": "2017-03-05T14:53:44Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68fa1c12-c7ce-4c7f-a78e-6d76e2ff58f5", "eventTime": "2017-03-05T14:53:44Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b904e3-7fb5-4847-946c-89fe26e1330f", "record_id": "flaws_cloudtrail:0000433:30b904e3-7fb5-4847-946c-89fe26e1330f", "row_index": 433, "timestamp": "2017-03-05T14:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b904e3-7fb5-4847-946c-89fe26e1330f", "eventTime": "2017-03-05T14:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b9683b-d85b-4d54-92dc-5043d0db39f6", "record_id": "flaws_cloudtrail:0000434:a4b9683b-d85b-4d54-92dc-5043d0db39f6", "row_index": 434, "timestamp": "2017-03-05T14:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b9683b-d85b-4d54-92dc-5043d0db39f6", "eventTime": "2017-03-05T14:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "225e87b3-4315-443d-85e4-a1b2b8010cce", "record_id": "flaws_cloudtrail:0000435:225e87b3-4315-443d-85e4-a1b2b8010cce", "row_index": 435, "timestamp": "2017-03-05T14:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "225e87b3-4315-443d-85e4-a1b2b8010cce", "eventTime": "2017-03-05T14:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e06223a6-b757-493d-9913-837bba2dca74", "record_id": "flaws_cloudtrail:0000436:e06223a6-b757-493d-9913-837bba2dca74", "row_index": 436, "timestamp": "2017-03-05T14:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e06223a6-b757-493d-9913-837bba2dca74", "eventTime": "2017-03-05T14:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0842abe1-e339-4fe9-9182-5697a9eb4ad0", "record_id": "flaws_cloudtrail:0000437:0842abe1-e339-4fe9-9182-5697a9eb4ad0", "row_index": 437, "timestamp": "2017-03-05T14:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0842abe1-e339-4fe9-9182-5697a9eb4ad0", "eventTime": "2017-03-05T14:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae098f8-dfed-4d68-b1b3-119069fe322c", "record_id": "flaws_cloudtrail:0000438:bae098f8-dfed-4d68-b1b3-119069fe322c", "row_index": 438, "timestamp": "2017-03-05T14:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae098f8-dfed-4d68-b1b3-119069fe322c", "eventTime": "2017-03-05T14:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d65ea60-ba0f-4242-adc9-8b8f891e3edd", "record_id": "flaws_cloudtrail:0000439:9d65ea60-ba0f-4242-adc9-8b8f891e3edd", "row_index": 439, "timestamp": "2017-03-05T14:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d65ea60-ba0f-4242-adc9-8b8f891e3edd", "eventTime": "2017-03-05T14:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0420bdaf-958e-4574-b721-340b2813e627", "record_id": "flaws_cloudtrail:0000440:0420bdaf-958e-4574-b721-340b2813e627", "row_index": 440, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0420bdaf-958e-4574-b721-340b2813e627", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92160d8-5a82-4446-a2c5-f5d9d61961", "record_id": "flaws_cloudtrail:0000441:92160d8-5a82-4446-a2c5-f5d9d61961", "row_index": 441, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92160d8-5a82-4446-a2c5-f5d9d61961", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2288f1f-ab5a-4c72-a53c-5391061a9608", "record_id": "flaws_cloudtrail:0000442:f2288f1f-ab5a-4c72-a53c-5391061a9608", "row_index": 442, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2288f1f-ab5a-4c72-a53c-5391061a9608", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71092b-332d-4ad7-aa6f-277213894b27", "record_id": "flaws_cloudtrail:0000443:71092b-332d-4ad7-aa6f-277213894b27", "row_index": 443, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71092b-332d-4ad7-aa6f-277213894b27", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37928-17a7-4409-a884-fa038420bed4c", "record_id": "flaws_cloudtrail:0000444:37928-17a7-4409-a884-fa038420bed4c", "row_index": 444, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37928-17a7-4409-a884-fa038420bed4c", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "696b7aff-f268-45e8-97d1-ef45c4475a06", "record_id": "flaws_cloudtrail:0000445:696b7aff-f268-45e8-97d1-ef45c4475a06", "row_index": 445, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "696b7aff-f268-45e8-97d1-ef45c4475a06", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4cc3d8-ceba-4c23-beba-ff0200510919", "record_id": "flaws_cloudtrail:0000446:5c4cc3d8-ceba-4c23-beba-ff0200510919", "row_index": 446, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4cc3d8-ceba-4c23-beba-ff0200510919", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0993ff0-85c1-4cbc-840b-962c4645f451", "record_id": "flaws_cloudtrail:0000447:e0993ff0-85c1-4cbc-840b-962c4645f451", "row_index": 447, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0993ff0-85c1-4cbc-840b-962c4645f451", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40f819d7-d3e8-42a6-9353-6ad4b5bfb973", "record_id": "flaws_cloudtrail:0000448:40f819d7-d3e8-42a6-9353-6ad4b5bfb973", "row_index": 448, "timestamp": "2017-03-05T14:53:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 612, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40f819d7-d3e8-42a6-9353-6ad4b5bfb973", "eventTime": "2017-03-05T14:53:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a955c40-ef05-4307-b006-ae870493dda39", "record_id": "flaws_cloudtrail:0000449:5a955c40-ef05-4307-b006-ae870493dda39", "row_index": 449, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a955c40-ef05-4307-b006-ae870493dda39", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aaaae62-37f1-4bde-b144-7602cfbd8527", "record_id": "flaws_cloudtrail:0000450:9aaaae62-37f1-4bde-b144-7602cfbd8527", "row_index": 450, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aaaae62-37f1-4bde-b144-7602cfbd8527", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8b649ae-be39-43df-813a-545df780eb69", "record_id": "flaws_cloudtrail:0000451:c8b649ae-be39-43df-813a-545df780eb69", "row_index": 451, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8b649ae-be39-43df-813a-545df780eb69", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38202-fe19-485e-a0e7-d063baeccb67", "record_id": "flaws_cloudtrail:0000452:38202-fe19-485e-a0e7-d063baeccb67", "row_index": 452, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38202-fe19-485e-a0e7-d063baeccb67", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d75b062-1884-480e-bd5b-4fe30c74bdcc", "record_id": "flaws_cloudtrail:0000453:6d75b062-1884-480e-bd5b-4fe30c74bdcc", "row_index": 453, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d75b062-1884-480e-bd5b-4fe30c74bdcc", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0413b65-c8d7-4a7c-b1b1-ce440815b0b", "record_id": "flaws_cloudtrail:0000454:b0413b65-c8d7-4a7c-b1b1-ce440815b0b", "row_index": 454, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0413b65-c8d7-4a7c-b1b1-ce440815b0b", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3e9dd9b-ce5b-4878-8e9c-c40814037595", "record_id": "flaws_cloudtrail:0000455:e3e9dd9b-ce5b-4878-8e9c-c40814037595", "row_index": 455, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3e9dd9b-ce5b-4878-8e9c-c40814037595", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289e6ebe-082d-40be-8b72-83f6b73c9ebc", "record_id": "flaws_cloudtrail:0000456:289e6ebe-082d-40be-8b72-83f6b73c9ebc", "row_index": 456, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289e6ebe-082d-40be-8b72-83f6b73c9ebc", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7b9a9c-e3ec-474c-a056-a9d4f0f944658", "record_id": "flaws_cloudtrail:0000457:9b7b9a9c-e3ec-474c-a056-a9d4f0f944658", "row_index": 457, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7b9a9c-e3ec-474c-a056-a9d4f0f944658", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d991507-9694-45eb-af08-1367ba97f8a3", "record_id": "flaws_cloudtrail:0000458:8d991507-9694-45eb-af08-1367ba97f8a3", "row_index": 458, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d991507-9694-45eb-af08-1367ba97f8a3", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890797c-7e1a-4127-8adf-b8c1abda8289", "record_id": "flaws_cloudtrail:0000459:890797c-7e1a-4127-8adf-b8c1abda8289", "row_index": 459, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890797c-7e1a-4127-8adf-b8c1abda8289", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b034943c-734a-4a49-9038-c4794ef1cee8", "record_id": "flaws_cloudtrail:0000460:b034943c-734a-4a49-9038-c4794ef1cee8", "row_index": 460, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b034943c-734a-4a49-9038-c4794ef1cee8", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8061be3-26e3-4f2c-b308-2421f94d4c93", "record_id": "flaws_cloudtrail:0000461:f8061be3-26e3-4f2c-b308-2421f94d4c93", "row_index": 461, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8061be3-26e3-4f2c-b308-2421f94d4c93", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "062a4e9d-f7d2-4ec2-864a-3573c937eb3c", "record_id": "flaws_cloudtrail:0000462:062a4e9d-f7d2-4ec2-864a-3573c937eb3c", "row_index": 462, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "062a4e9d-f7d2-4ec2-864a-3573c937eb3c", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "670fd7fd-648d-4c57-8822-99846c9423b", "record_id": "flaws_cloudtrail:0000463:670fd7fd-648d-4c57-8822-99846c9423b", "row_index": 463, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "670fd7fd-648d-4c57-8822-99846c9423b", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5045ea19-b75f-463b-8b02-4663dc374253", "record_id": "flaws_cloudtrail:0000464:5045ea19-b75f-463b-8b02-4663dc374253", "row_index": 464, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5045ea19-b75f-463b-8b02-4663dc374253", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ddf80e6-ebdf-45e8-aced-75b554d2b39e", "record_id": "flaws_cloudtrail:0000465:0ddf80e6-ebdf-45e8-aced-75b554d2b39e", "row_index": 465, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ddf80e6-ebdf-45e8-aced-75b554d2b39e", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b051306f-38fb-4694-b6f1-f16afabcc274", "record_id": "flaws_cloudtrail:0000466:b051306f-38fb-4694-b6f1-f16afabcc274", "row_index": 466, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b051306f-38fb-4694-b6f1-f16afabcc274", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67a994b4-713f-4668-ae6d-c1359718dd07", "record_id": "flaws_cloudtrail:0000467:67a994b4-713f-4668-ae6d-c1359718dd07", "row_index": 467, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67a994b4-713f-4668-ae6d-c1359718dd07", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da9adaa1-9388-4223-acfd-aafb3ee33e14", "record_id": "flaws_cloudtrail:0000468:da9adaa1-9388-4223-acfd-aafb3ee33e14", "row_index": 468, "timestamp": "2017-03-05T14:53:47Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da9adaa1-9388-4223-acfd-aafb3ee33e14", "eventTime": "2017-03-05T14:53:47Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0fe5097-df02-4f25-bb71-bb985f17cd4d", "record_id": "flaws_cloudtrail:0000469:d0fe5097-df02-4f25-bb71-bb985f17cd4d", "row_index": 469, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0fe5097-df02-4f25-bb71-bb985f17cd4d", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e44115f-cc54-41fb-a862-35c29d0565a5", "record_id": "flaws_cloudtrail:0000470:8e44115f-cc54-41fb-a862-35c29d0565a5", "row_index": 470, "timestamp": "2017-03-05T14:53:48Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e44115f-cc54-41fb-a862-35c29d0565a5", "eventTime": "2017-03-05T14:53:48Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a0ee47-5afd-4434-acca-f0ad58452e3e", "record_id": "flaws_cloudtrail:0000471:48a0ee47-5afd-4434-acca-f0ad58452e3e", "row_index": 471, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a0ee47-5afd-4434-acca-f0ad58452e3e", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71dd17a4-2d46-4487-b418-b7939d7d0e23", "record_id": "flaws_cloudtrail:0000472:71dd17a4-2d46-4487-b418-b7939d7d0e23", "row_index": 472, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71dd17a4-2d46-4487-b418-b7939d7d0e23", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b127eb-8456-46f5-8ddd-bcf776bc477e", "record_id": "flaws_cloudtrail:0000473:a2b127eb-8456-46f5-8ddd-bcf776bc477e", "row_index": 473, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b127eb-8456-46f5-8ddd-bcf776bc477e", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614cd36e-5799-4d9c-a2cb-a732dbd7593b", "record_id": "flaws_cloudtrail:0000474:614cd36e-5799-4d9c-a2cb-a732dbd7593b", "row_index": 474, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614cd36e-5799-4d9c-a2cb-a732dbd7593b", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfc063d4-0745-4a64-9a30-37c4d007d072", "record_id": "flaws_cloudtrail:0000475:bfc063d4-0745-4a64-9a30-37c4d007d072", "row_index": 475, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfc063d4-0745-4a64-9a30-37c4d007d072", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8766c588-fd1d-4104-96ab-06bad0782dda", "record_id": "flaws_cloudtrail:0000476:8766c588-fd1d-4104-96ab-06bad0782dda", "row_index": 476, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8766c588-fd1d-4104-96ab-06bad0782dda", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbd549583-6f02-4516-a6ae-563587a05ea6", "record_id": "flaws_cloudtrail:0000477:dbd549583-6f02-4516-a6ae-563587a05ea6", "row_index": 477, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbd549583-6f02-4516-a6ae-563587a05ea6", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a321890c-b7fa-4607-b08b-6a1951e7d349", "record_id": "flaws_cloudtrail:0000478:8a321890c-b7fa-4607-b08b-6a1951e7d349", "row_index": 478, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a321890c-b7fa-4607-b08b-6a1951e7d349", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea23e555-7167-48d0-ad19-4cd7dcb2d412", "record_id": "flaws_cloudtrail:0000479:ea23e555-7167-48d0-ad19-4cd7dcb2d412", "row_index": 479, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea23e555-7167-48d0-ad19-4cd7dcb2d412", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2199ca6a-a897-44dd-aaad-8a34ab06a0b6", "record_id": "flaws_cloudtrail:0000480:2199ca6a-a897-44dd-aaad-8a34ab06a0b6", "row_index": 480, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2199ca6a-a897-44dd-aaad-8a34ab06a0b6", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76e0ae7-9b39-469a-ab46-0beab80a50e9", "record_id": "flaws_cloudtrail:0000481:a76e0ae7-9b39-469a-ab46-0beab80a50e9", "row_index": 481, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76e0ae7-9b39-469a-ab46-0beab80a50e9", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3589f7d-ac1b-428b-abff-5841824da792", "record_id": "flaws_cloudtrail:0000482:c3589f7d-ac1b-428b-abff-5841824da792", "row_index": 482, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3589f7d-ac1b-428b-abff-5841824da792", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48cf2dca-439c-4fcb-8f47-84d52e130cc7", "record_id": "flaws_cloudtrail:0000483:48cf2dca-439c-4fcb-8f47-84d52e130cc7", "row_index": 483, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48cf2dca-439c-4fcb-8f47-84d52e130cc7", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19b2882e-2cf9-4464-b786-d28177b5fe9", "record_id": "flaws_cloudtrail:0000484:19b2882e-2cf9-4464-b786-d28177b5fe9", "row_index": 484, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19b2882e-2cf9-4464-b786-d28177b5fe9", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "282e9d05-8cf8-4450-88b0-c0fab65855", "record_id": "flaws_cloudtrail:0000485:282e9d05-8cf8-4450-88b0-c0fab65855", "row_index": 485, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "282e9d05-8cf8-4450-88b0-c0fab65855", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5b5b3e-f375-4d2d-865d-e1c10b956c03", "record_id": "flaws_cloudtrail:0000486:5b5b5b3e-f375-4d2d-865d-e1c10b956c03", "row_index": 486, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5b5b3e-f375-4d2d-865d-e1c10b956c03", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b51988a9-0bbe-43b9-81a1-1e776a7013f6", "record_id": "flaws_cloudtrail:0000487:b51988a9-0bbe-43b9-81a1-1e776a7013f6", "row_index": 487, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b51988a9-0bbe-43b9-81a1-1e776a7013f6", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f955485-3034-46a9-928d-b355cc74a202", "record_id": "flaws_cloudtrail:0000488:5f955485-3034-46a9-928d-b355cc74a202", "row_index": 488, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f955485-3034-46a9-928d-b355cc74a202", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc6c0334-120c-4859-bdc1-7add9ac786781", "record_id": "flaws_cloudtrail:0000489:dc6c0334-120c-4859-bdc1-7add9ac786781", "row_index": 489, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc6c0334-120c-4859-bdc1-7add9ac786781", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63bbb552-5ebe-4962-bae8-d9dd305802e", "record_id": "flaws_cloudtrail:0000490:63bbb552-5ebe-4962-bae8-d9dd305802e", "row_index": 490, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63bbb552-5ebe-4962-bae8-d9dd305802e", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e35f3ed2-a5b8-4cf0-ac34-29d53bf3579d", "record_id": "flaws_cloudtrail:0000491:e35f3ed2-a5b8-4cf0-ac34-29d53bf3579d", "row_index": 491, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e35f3ed2-a5b8-4cf0-ac34-29d53bf3579d", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27963aa-05ae-4531-9efe-ebd7805f9927", "record_id": "flaws_cloudtrail:0000492:27963aa-05ae-4531-9efe-ebd7805f9927", "row_index": 492, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27963aa-05ae-4531-9efe-ebd7805f9927", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24d217e5-e5d9-4eaa-958e-e0416c2b680f", "record_id": "flaws_cloudtrail:0000493:24d217e5-e5d9-4eaa-958e-e0416c2b680f", "row_index": 493, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24d217e5-e5d9-4eaa-958e-e0416c2b680f", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7637ad8e-cddd-49a5-90ba-0871fb903262", "record_id": "flaws_cloudtrail:0000494:7637ad8e-cddd-49a5-90ba-0871fb903262", "row_index": 494, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7637ad8e-cddd-49a5-90ba-0871fb903262", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93f8bedb-770a-4660-8b35-b1bacf197f92", "record_id": "flaws_cloudtrail:0000495:93f8bedb-770a-4660-8b35-b1bacf197f92", "row_index": 495, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93f8bedb-770a-4660-8b35-b1bacf197f92", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9228d813-dcef-4ca3-a078-012fe71bab0e", "record_id": "flaws_cloudtrail:0000496:9228d813-dcef-4ca3-a078-012fe71bab0e", "row_index": 496, "timestamp": "2017-03-05T14:53:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9228d813-dcef-4ca3-a078-012fe71bab0e", "eventTime": "2017-03-05T14:53:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "[Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af500390-633c-444d-829e-5834ffa167d1", "record_id": "flaws_cloudtrail:0000497:af500390-633c-444d-829e-5834ffa167d1", "row_index": 497, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af500390-633c-444d-829e-5834ffa167d1", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13707feb-dbb4-4334-adde-2f355b281d2b", "record_id": "flaws_cloudtrail:0000498:13707feb-dbb4-4334-adde-2f355b281d2b", "row_index": 498, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13707feb-dbb4-4334-adde-2f355b281d2b", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4094f47d-1638-491f-a440-e1de4623cc25", "record_id": "flaws_cloudtrail:0000499:4094f47d-1638-491f-a440-e1de4623cc25", "row_index": 499, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4094f47d-1638-491f-a440-e1de4623cc25", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425d1649-b0ec-413f-b769-7acafa04dbfd", "record_id": "flaws_cloudtrail:0000500:425d1649-b0ec-413f-b769-7acafa04dbfd", "row_index": 500, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425d1649-b0ec-413f-b769-7acafa04dbfd", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae9edd45-37fe-46ee-b1ec-2ac1365e994f", "record_id": "flaws_cloudtrail:0000501:ae9edd45-37fe-46ee-b1ec-2ac1365e994f", "row_index": 501, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae9edd45-37fe-46ee-b1ec-2ac1365e994f", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aab3587-25e3-49dc-a085-38d1095b0dc1", "record_id": "flaws_cloudtrail:0000502:4aab3587-25e3-49dc-a085-38d1095b0dc1", "row_index": 502, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aab3587-25e3-49dc-a085-38d1095b0dc1", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5706c74-a478-4946-ae51-4b71e3e385a1", "record_id": "flaws_cloudtrail:0000503:f5706c74-a478-4946-ae51-4b71e3e385a1", "row_index": 503, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5706c74-a478-4946-ae51-4b71e3e385a1", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f3332aa-b118-4c60-b6b5-67aaf79b31a8", "record_id": "flaws_cloudtrail:0000504:6f3332aa-b118-4c60-b6b5-67aaf79b31a8", "row_index": 504, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f3332aa-b118-4c60-b6b5-67aaf79b31a8", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd31c56-9f24-4171-afbc-022903aa5858", "record_id": "flaws_cloudtrail:0000505:9bd31c56-9f24-4171-afbc-022903aa5858", "row_index": 505, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd31c56-9f24-4171-afbc-022903aa5858", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae476aa-6214-49a3-909a-4b35a6631d02", "record_id": "flaws_cloudtrail:0000506:bae476aa-6214-49a3-909a-4b35a6631d02", "row_index": 506, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae476aa-6214-49a3-909a-4b35a6631d02", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "927d8227-d46d-400e-b1b0-003789f6fcb1", "record_id": "flaws_cloudtrail:0000507:927d8227-d46d-400e-b1b0-003789f6fcb1", "row_index": 507, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "927d8227-d46d-400e-b1b0-003789f6fcb1", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d575e6b-b2d4-428b-8250-347ad37a26d3", "record_id": "flaws_cloudtrail:0000508:3d575e6b-b2d4-428b-8250-347ad37a26d3", "row_index": 508, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d575e6b-b2d4-428b-8250-347ad37a26d3", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365004a-233f-486b-915f-8cef67eb24d5", "record_id": "flaws_cloudtrail:0000509:365004a-233f-486b-915f-8cef67eb24d5", "row_index": 509, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365004a-233f-486b-915f-8cef67eb24d5", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f30a47-333f-47ab-989d-60b6b760bb51", "record_id": "flaws_cloudtrail:0000510:46f30a47-333f-47ab-989d-60b6b760bb51", "row_index": 510, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f30a47-333f-47ab-989d-60b6b760bb51", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54957-8fff-4488-8591-78b19a688d7c", "record_id": "flaws_cloudtrail:0000511:54957-8fff-4488-8591-78b19a688d7c", "row_index": 511, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54957-8fff-4488-8591-78b19a688d7c", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7881d346-5d8d-4b00-8af2-5e6d9d1f9bbd", "record_id": "flaws_cloudtrail:0000512:7881d346-5d8d-4b00-8af2-5e6d9d1f9bbd", "row_index": 512, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7881d346-5d8d-4b00-8af2-5e6d9d1f9bbd", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "read_level_6_bucket", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd83568-63ff-46ac-9c1e-c46401f30be7", "record_id": "flaws_cloudtrail:0000513:bd83568-63ff-46ac-9c1e-c46401f30be7", "row_index": 513, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd83568-63ff-46ac-9c1e-c46401f30be7", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44a103a3-820d-4929-bc0e-e5877feb2361", "record_id": "flaws_cloudtrail:0000514:44a103a3-820d-4929-bc0e-e5877feb2361", "row_index": 514, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44a103a3-820d-4929-bc0e-e5877feb2361", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c929613-0daa-47c9-b515-21bb9517c83b", "record_id": "flaws_cloudtrail:0000515:c929613-0daa-47c9-b515-21bb9517c83b", "row_index": 515, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c929613-0daa-47c9-b515-21bb9517c83b", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cbde2e6-2c1e-4642-bf69-8aa3612dc549", "record_id": "flaws_cloudtrail:0000516:2cbde2e6-2c1e-4642-bf69-8aa3612dc549", "row_index": 516, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cbde2e6-2c1e-4642-bf69-8aa3612dc549", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b078f824-0e6c-4e1b-8d7a-af1a160043b1", "record_id": "flaws_cloudtrail:0000517:b078f824-0e6c-4e1b-8d7a-af1a160043b1", "row_index": 517, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b078f824-0e6c-4e1b-8d7a-af1a160043b1", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614eb9c4-b591-4996-a566-edcd0005fae8", "record_id": "flaws_cloudtrail:0000518:614eb9c4-b591-4996-a566-edcd0005fae8", "row_index": 518, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614eb9c4-b591-4996-a566-edcd0005fae8", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "967fdd94-5ee2-4dc2-b68d-73adb24a7f03", "record_id": "flaws_cloudtrail:0000519:967fdd94-5ee2-4dc2-b68d-73adb24a7f03", "row_index": 519, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "967fdd94-5ee2-4dc2-b68d-73adb24a7f03", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4addcfcf-cc7f-4199-9496-447790c813", "record_id": "flaws_cloudtrail:0000520:4addcfcf-cc7f-4199-9496-447790c813", "row_index": 520, "timestamp": "2017-03-05T14:53:49Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4addcfcf-cc7f-4199-9496-447790c813", "eventTime": "2017-03-05T14:53:49Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd3aa78a-2fa5-4e78-9b62-57cd661c6a45", "record_id": "flaws_cloudtrail:0000521:bd3aa78a-2fa5-4e78-9b62-57cd661c6a45", "row_index": 521, "timestamp": "2017-03-05T14:53:49Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd3aa78a-2fa5-4e78-9b62-57cd661c6a45", "eventTime": "2017-03-05T14:53:49Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50341-8a2f-4390-bdce-6f20909cf71f", "record_id": "flaws_cloudtrail:0000522:50341-8a2f-4390-bdce-6f20909cf71f", "row_index": 522, "timestamp": "2017-03-05T14:53:50Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50341-8a2f-4390-bdce-6f20909cf71f", "eventTime": "2017-03-05T14:53:50Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e02ade-96c7-4b5b-84a8-ae323cabc60d", "record_id": "flaws_cloudtrail:0000523:e8e02ade-96c7-4b5b-84a8-ae323cabc60d", "row_index": 523, "timestamp": "2017-03-05T14:53:50Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e02ade-96c7-4b5b-84a8-ae323cabc60d", "eventTime": "2017-03-05T14:53:50Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a86d89d-48d3-4bb2-bcaf-8a044a823332", "record_id": "flaws_cloudtrail:0000524:5a86d89d-48d3-4bb2-bcaf-8a044a823332", "row_index": 524, "timestamp": "2017-03-05T14:53:50Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a86d89d-48d3-4bb2-bcaf-8a044a823332", "eventTime": "2017-03-05T14:53:50Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c76bc5-87b7-4bfe-8e9d-e8cc7b2892dc", "record_id": "flaws_cloudtrail:0000525:16c76bc5-87b7-4bfe-8e9d-e8cc7b2892dc", "row_index": 525, "timestamp": "2017-03-05T14:53:52Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c76bc5-87b7-4bfe-8e9d-e8cc7b2892dc", "eventTime": "2017-03-05T14:53:52Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991a74bd-bca8-4fe4-9b39-7e20e8aa1fca", "record_id": "flaws_cloudtrail:0000526:991a74bd-bca8-4fe4-9b39-7e20e8aa1fca", "row_index": 526, "timestamp": "2017-03-05T14:53:52Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991a74bd-bca8-4fe4-9b39-7e20e8aa1fca", "eventTime": "2017-03-05T14:53:52Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd0173c4-795c-44e6-95ca-9108733d2357", "record_id": "flaws_cloudtrail:0000527:dd0173c4-795c-44e6-95ca-9108733d2357", "row_index": 527, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd0173c4-795c-44e6-95ca-9108733d2357", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa496b02-03dd-489e-9be5-2dd2a647374f", "record_id": "flaws_cloudtrail:0000528:aa496b02-03dd-489e-9be5-2dd2a647374f", "row_index": 528, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa496b02-03dd-489e-9be5-2dd2a647374f", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b9814d-21d6-4d36-b052-c57bb52fba12", "record_id": "flaws_cloudtrail:0000529:01b9814d-21d6-4d36-b052-c57bb52fba12", "row_index": 529, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b9814d-21d6-4d36-b052-c57bb52fba12", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e938104c9-fac6-4c6f-b24c-51101ccbcfb5", "record_id": "flaws_cloudtrail:0000530:e938104c9-fac6-4c6f-b24c-51101ccbcfb5", "row_index": 530, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e938104c9-fac6-4c6f-b24c-51101ccbcfb5", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87848ce8-5019-4383-bd90-1be967ab9256", "record_id": "flaws_cloudtrail:0000531:87848ce8-5019-4383-bd90-1be967ab9256", "row_index": 531, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87848ce8-5019-4383-bd90-1be967ab9256", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97fd514c-abd4-42c4-a34d-812557f2a73f", "record_id": "flaws_cloudtrail:0000532:97fd514c-abd4-42c4-a34d-812557f2a73f", "row_index": 532, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97fd514c-abd4-42c4-a34d-812557f2a73f", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c505602-6141-495f-a771-df347a5ec6c8", "record_id": "flaws_cloudtrail:0000533:c505602-6141-495f-a771-df347a5ec6c8", "row_index": 533, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c505602-6141-495f-a771-df347a5ec6c8", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623314f26-2728-4db6-9f62-79261a8d5", "record_id": "flaws_cloudtrail:0000534:623314f26-2728-4db6-9f62-79261a8d5", "row_index": 534, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623314f26-2728-4db6-9f62-79261a8d5", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "897217bd-5af8-4077-bad8-0bd276a2aabe", "record_id": "flaws_cloudtrail:0000535:897217bd-5af8-4077-bad8-0bd276a2aabe", "row_index": 535, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "897217bd-5af8-4077-bad8-0bd276a2aabe", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a2f0a9-3d20-4748-9b9e-82bf1bb46fd0", "record_id": "flaws_cloudtrail:0000536:a6a2f0a9-3d20-4748-9b9e-82bf1bb46fd0", "row_index": 536, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a2f0a9-3d20-4748-9b9e-82bf1bb46fd0", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd8647c-cddb-43e7-875c-5d8de45b729a", "record_id": "flaws_cloudtrail:0000537:ddd8647c-cddb-43e7-875c-5d8de45b729a", "row_index": 537, "timestamp": "2017-03-05T14:53:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd8647c-cddb-43e7-875c-5d8de45b729a", "eventTime": "2017-03-05T14:53:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0478be76-b23d-4bbc-802f-125c1321e2b1", "record_id": "flaws_cloudtrail:0000538:0478be76-b23d-4bbc-802f-125c1321e2b1", "row_index": 538, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0478be76-b23d-4bbc-802f-125c1321e2b1", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d54a31-850e-4940-85be-8896525c74ea", "record_id": "flaws_cloudtrail:0000539:68d54a31-850e-4940-85be-8896525c74ea", "row_index": 539, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d54a31-850e-4940-85be-8896525c74ea", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5be71b44-63f3-47b6-ac5a-80ed81ed9a2b", "record_id": "flaws_cloudtrail:0000540:5be71b44-63f3-47b6-ac5a-80ed81ed9a2b", "row_index": 540, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5be71b44-63f3-47b6-ac5a-80ed81ed9a2b", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3181ecbd-3c61-4090-bd1b-a8e03e0c8f79", "record_id": "flaws_cloudtrail:0000541:3181ecbd-3c61-4090-bd1b-a8e03e0c8f79", "row_index": 541, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3181ecbd-3c61-4090-bd1b-a8e03e0c8f79", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dacce0e-8fda-459d-80b7-4fe5eeaf0f23", "record_id": "flaws_cloudtrail:0000542:0dacce0e-8fda-459d-80b7-4fe5eeaf0f23", "row_index": 542, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dacce0e-8fda-459d-80b7-4fe5eeaf0f23", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6850a5ce-36a1-445e-900a-6093454a23be", "record_id": "flaws_cloudtrail:0000543:6850a5ce-36a1-445e-900a-6093454a23be", "row_index": 543, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6850a5ce-36a1-445e-900a-6093454a23be", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "868ff77b-c266-4b2e-bb5c-b2700f2fb286", "record_id": "flaws_cloudtrail:0000544:868ff77b-c266-4b2e-bb5c-b2700f2fb286", "row_index": 544, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "868ff77b-c266-4b2e-bb5c-b2700f2fb286", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8e1df4-03ae-442f-a8a5-62df7587b941", "record_id": "flaws_cloudtrail:0000545:5d8e1df4-03ae-442f-a8a5-62df7587b941", "row_index": 545, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8e1df4-03ae-442f-a8a5-62df7587b941", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed11f080-b8d8-45f5-9053-d0715ffd48f9", "record_id": "flaws_cloudtrail:0000546:ed11f080-b8d8-45f5-9053-d0715ffd48f9", "row_index": 546, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed11f080-b8d8-45f5-9053-d0715ffd48f9", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c741cfc-5d28-4b21-84a4-9ad31bec4c81", "record_id": "flaws_cloudtrail:0000547:6c741cfc-5d28-4b21-84a4-9ad31bec4c81", "row_index": 547, "timestamp": "2017-03-05T14:53:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c741cfc-5d28-4b21-84a4-9ad31bec4c81", "eventTime": "2017-03-05T14:53:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95bee324-9eae-424d-8ac3-69d745cb9899", "record_id": "flaws_cloudtrail:0000548:95bee324-9eae-424d-8ac3-69d745cb9899", "row_index": 548, "timestamp": "2017-03-05T14:53:55Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95bee324-9eae-424d-8ac3-69d745cb9899", "eventTime": "2017-03-05T14:53:55Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41098-f238-488a-adf3-504b39650b04", "record_id": "flaws_cloudtrail:0000549:41098-f238-488a-adf3-504b39650b04", "row_index": 549, "timestamp": "2017-03-05T14:53:55Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41098-f238-488a-adf3-504b39650b04", "eventTime": "2017-03-05T14:53:55Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35c72bea-090c-4386-acd5-45dc27728a21", "record_id": "flaws_cloudtrail:0000550:35c72bea-090c-4386-acd5-45dc27728a21", "row_index": 550, "timestamp": "2017-03-05T14:53:55Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35c72bea-090c-4386-acd5-45dc27728a21", "eventTime": "2017-03-05T14:53:55Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db35f417-9aa1-4e5a-92b6-066e0b0e7e14", "record_id": "flaws_cloudtrail:0000551:db35f417-9aa1-4e5a-92b6-066e0b0e7e14", "row_index": 551, "timestamp": "2017-03-05T14:53:55Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db35f417-9aa1-4e5a-92b6-066e0b0e7e14", "eventTime": "2017-03-05T14:53:55Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50756e97-6d64-4013-b554-05cb6bf536c3", "record_id": "flaws_cloudtrail:0000552:50756e97-6d64-4013-b554-05cb6bf536c3", "row_index": 552, "timestamp": "2017-03-05T14:53:55Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50756e97-6d64-4013-b554-05cb6bf536c3", "eventTime": "2017-03-05T14:53:55Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a266bfb-1382-4cae-8931-1a64ed1ca174", "record_id": "flaws_cloudtrail:0000553:9a266bfb-1382-4cae-8931-1a64ed1ca174", "row_index": 553, "timestamp": "2017-03-05T14:53:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a266bfb-1382-4cae-8931-1a64ed1ca174", "eventTime": "2017-03-05T14:53:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7207f2a9-27a9-4bab-a986-9a2232e700ee", "record_id": "flaws_cloudtrail:0000554:7207f2a9-27a9-4bab-a986-9a2232e700ee", "row_index": 554, "timestamp": "2017-03-05T14:53:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7207f2a9-27a9-4bab-a986-9a2232e700ee", "eventTime": "2017-03-05T14:53:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7995cbf-770f-4cf2-a134-55db2fd35cea", "record_id": "flaws_cloudtrail:0000555:a7995cbf-770f-4cf2-a134-55db2fd35cea", "row_index": 555, "timestamp": "2017-03-05T14:54:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7995cbf-770f-4cf2-a134-55db2fd35cea", "eventTime": "2017-03-05T14:54:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f7a6742-bef0-470b-8417-f05123d555517", "record_id": "flaws_cloudtrail:0000556:6f7a6742-bef0-470b-8417-f05123d555517", "row_index": 556, "timestamp": "2017-03-05T14:54:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f7a6742-bef0-470b-8417-f05123d555517", "eventTime": "2017-03-05T14:54:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc7dbb10-c31e-4db3-97ec-7afa1ea708e6", "record_id": "flaws_cloudtrail:0000557:bc7dbb10-c31e-4db3-97ec-7afa1ea708e6", "row_index": 557, "timestamp": "2017-03-05T14:54:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc7dbb10-c31e-4db3-97ec-7afa1ea708e6", "eventTime": "2017-03-05T14:54:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5113fe8d-2e01-4c73-b4eb-9e2b8e02e5f8", "record_id": "flaws_cloudtrail:0000558:5113fe8d-2e01-4c73-b4eb-9e2b8e02e5f8", "row_index": 558, "timestamp": "2017-03-05T14:54:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5113fe8d-2e01-4c73-b4eb-9e2b8e02e5f8", "eventTime": "2017-03-05T14:54:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5baf1d49-513b-4ecb-ad53-eda338ef7374", "record_id": "flaws_cloudtrail:0000559:5baf1d49-513b-4ecb-ad53-eda338ef7374", "row_index": 559, "timestamp": "2017-03-05T14:54:02Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5baf1d49-513b-4ecb-ad53-eda338ef7374", "eventTime": "2017-03-05T14:54:02Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0b178e5-09f3-48b4-a99d-232487c2e7ec", "record_id": "flaws_cloudtrail:0000560:e0b178e5-09f3-48b4-a99d-232487c2e7ec", "row_index": 560, "timestamp": "2017-03-05T14:54:02Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0b178e5-09f3-48b4-a99d-232487c2e7ec", "eventTime": "2017-03-05T14:54:02Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19061e1-0576-4782-9bf0-8fa0cd235947", "record_id": "flaws_cloudtrail:0000561:19061e1-0576-4782-9bf0-8fa0cd235947", "row_index": 561, "timestamp": "2017-03-05T14:54:02Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19061e1-0576-4782-9bf0-8fa0cd235947", "eventTime": "2017-03-05T14:54:02Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb77fd8-0c42-4d92-81c0-3e7cc021a847", "record_id": "flaws_cloudtrail:0000562:2cb77fd8-0c42-4d92-81c0-3e7cc021a847", "row_index": 562, "timestamp": "2017-03-05T14:54:02Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb77fd8-0c42-4d92-81c0-3e7cc021a847", "eventTime": "2017-03-05T14:54:02Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42e9fe8e-69a5-45cf-aabd-f502a19b7636", "record_id": "flaws_cloudtrail:0000563:42e9fe8e-69a5-45cf-aabd-f502a19b7636", "row_index": 563, "timestamp": "2017-03-05T14:54:02Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42e9fe8e-69a5-45cf-aabd-f502a19b7636", "eventTime": "2017-03-05T14:54:02Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30a3fb96-2a1b-48d7-bc87-0bc70b9c031d", "record_id": "flaws_cloudtrail:0000564:30a3fb96-2a1b-48d7-bc87-0bc70b9c031d", "row_index": 564, "timestamp": "2017-03-05T14:54:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30a3fb96-2a1b-48d7-bc87-0bc70b9c031d", "eventTime": "2017-03-05T14:54:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6954b56-315f-4875-8487-9fdd1f3e766a", "record_id": "flaws_cloudtrail:0000565:c6954b56-315f-4875-8487-9fdd1f3e766a", "row_index": 565, "timestamp": "2017-03-05T14:54:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6954b56-315f-4875-8487-9fdd1f3e766a", "eventTime": "2017-03-05T14:54:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "088216a-b9b7-4930-9285-26da8cfee07d", "record_id": "flaws_cloudtrail:0000566:088216a-b9b7-4930-9285-26da8cfee07d", "row_index": 566, "timestamp": "2017-03-05T14:54:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "088216a-b9b7-4930-9285-26da8cfee07d", "eventTime": "2017-03-05T14:54:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fe822f0-4543-478f-96e4-cd99ccffb936", "record_id": "flaws_cloudtrail:0000567:6fe822f0-4543-478f-96e4-cd99ccffb936", "row_index": 567, "timestamp": "2017-03-05T14:54:04Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fe822f0-4543-478f-96e4-cd99ccffb936", "eventTime": "2017-03-05T14:54:04Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cb643f3-f063-41e7-bfde-823a83ee4de0", "record_id": "flaws_cloudtrail:0000568:5cb643f3-f063-41e7-bfde-823a83ee4de0", "row_index": 568, "timestamp": "2017-03-05T14:54:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cb643f3-f063-41e7-bfde-823a83ee4de0", "eventTime": "2017-03-05T14:54:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a6ce9e5-5ac8-4a1c-8abc-2c0f7f8b72fc", "record_id": "flaws_cloudtrail:0000569:1a6ce9e5-5ac8-4a1c-8abc-2c0f7f8b72fc", "row_index": 569, "timestamp": "2017-03-05T14:54:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a6ce9e5-5ac8-4a1c-8abc-2c0f7f8b72fc", "eventTime": "2017-03-05T14:54:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a3fccb-996c-43cb-8756-aedce8c570f8", "record_id": "flaws_cloudtrail:0000570:b3a3fccb-996c-43cb-8756-aedce8c570f8", "row_index": 570, "timestamp": "2017-03-05T14:54:04Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA3ICTCSR9V1J1IOS3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a3fccb-996c-43cb-8756-aedce8c570f8", "eventTime": "2017-03-05T14:54:04Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA3ICTCSR9V1J1IOS3", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:54:04Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f11107-7cc8-49f5-8923-691494b395", "record_id": "flaws_cloudtrail:0000571:f11107-7cc8-49f5-8923-691494b395", "row_index": 571, "timestamp": "2017-03-05T14:54:04Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f11107-7cc8-49f5-8923-691494b395", "eventTime": "2017-03-05T14:54:04Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604396-9859-4a38-8fb3-04dd6f0fa803", "record_id": "flaws_cloudtrail:0000572:604396-9859-4a38-8fb3-04dd6f0fa803", "row_index": 572, "timestamp": "2017-03-05T14:54:06Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604396-9859-4a38-8fb3-04dd6f0fa803", "eventTime": "2017-03-05T14:54:06Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b265123a-1606-48bd-9bbf-b61423186cde", "record_id": "flaws_cloudtrail:0000573:9b265123a-1606-48bd-9bbf-b61423186cde", "row_index": 573, "timestamp": "2017-03-05T14:54:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b265123a-1606-48bd-9bbf-b61423186cde", "eventTime": "2017-03-05T14:54:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea82a65b-3918-4209-8dbd-c21bc9c300f9", "record_id": "flaws_cloudtrail:0000574:ea82a65b-3918-4209-8dbd-c21bc9c300f9", "row_index": 574, "timestamp": "2017-03-05T14:54:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea82a65b-3918-4209-8dbd-c21bc9c300f9", "eventTime": "2017-03-05T14:54:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f60bf73d-3bd5-4832-abff-404846634966", "record_id": "flaws_cloudtrail:0000575:f60bf73d-3bd5-4832-abff-404846634966", "row_index": 575, "timestamp": "2017-03-05T14:54:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f60bf73d-3bd5-4832-abff-404846634966", "eventTime": "2017-03-05T14:54:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c40290-59c5-4203-9a48-8228d62071a0", "record_id": "flaws_cloudtrail:0000576:c40290-59c5-4203-9a48-8228d62071a0", "row_index": 576, "timestamp": "2017-03-05T14:54:08Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c40290-59c5-4203-9a48-8228d62071a0", "eventTime": "2017-03-05T14:54:08Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db77fd98-26d7-4f52-91b0-e63739cb016c", "record_id": "flaws_cloudtrail:0000577:db77fd98-26d7-4f52-91b0-e63739cb016c", "row_index": 577, "timestamp": "2017-03-05T14:54:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db77fd98-26d7-4f52-91b0-e63739cb016c", "eventTime": "2017-03-05T14:54:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed891022a-b3a5-47e8-8ceb-7e7bf1c47c88", "record_id": "flaws_cloudtrail:0000578:ed891022a-b3a5-47e8-8ceb-7e7bf1c47c88", "row_index": 578, "timestamp": "2017-03-05T14:54:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA6BE0IQ3XJDY9EJRV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed891022a-b3a5-47e8-8ceb-7e7bf1c47c88", "eventTime": "2017-03-05T14:54:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6BE0IQ3XJDY9EJRV", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:54:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe64aec3-48dd-4a2e-8c21-b837a8c57896", "record_id": "flaws_cloudtrail:0000579:fe64aec3-48dd-4a2e-8c21-b837a8c57896", "row_index": 579, "timestamp": "2017-03-05T14:54:11Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe64aec3-48dd-4a2e-8c21-b837a8c57896", "eventTime": "2017-03-05T14:54:11Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d2133fa-38a0-4cf8-89db-897ae05f0b34", "record_id": "flaws_cloudtrail:0000580:2d2133fa-38a0-4cf8-89db-897ae05f0b34", "row_index": 580, "timestamp": "2017-03-05T14:54:11Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAXR25AMXU8Y73JDCO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d2133fa-38a0-4cf8-89db-897ae05f0b34", "eventTime": "2017-03-05T14:54:11Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXR25AMXU8Y73JDCO", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:54:11Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d62a7f-a90b-4aad-b10e-13e26e10f3db", "record_id": "flaws_cloudtrail:0000581:97d62a7f-a90b-4aad-b10e-13e26e10f3db", "row_index": 581, "timestamp": "2017-03-05T14:54:11Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d62a7f-a90b-4aad-b10e-13e26e10f3db", "eventTime": "2017-03-05T14:54:11Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fef6653-16ed-4304-9910-c300a52a2403", "record_id": "flaws_cloudtrail:0000582:9fef6653-16ed-4304-9910-c300a52a2403", "row_index": 582, "timestamp": "2017-03-05T14:54:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fef6653-16ed-4304-9910-c300a52a2403", "eventTime": "2017-03-05T14:54:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564a29a6-ed49-45ae-aa90-ff99756bada7", "record_id": "flaws_cloudtrail:0000583:564a29a6-ed49-45ae-aa90-ff99756bada7", "row_index": 583, "timestamp": "2017-03-05T14:54:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564a29a6-ed49-45ae-aa90-ff99756bada7", "eventTime": "2017-03-05T14:54:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa9e55db-ecae-426b-9e93-d2bc9fbb8e6c", "record_id": "flaws_cloudtrail:0000584:aa9e55db-ecae-426b-9e93-d2bc9fbb8e6c", "row_index": 584, "timestamp": "2017-03-05T14:54:11Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa9e55db-ecae-426b-9e93-d2bc9fbb8e6c", "eventTime": "2017-03-05T14:54:11Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a454c987-a596-4250-9058-9b78e580e9be", "record_id": "flaws_cloudtrail:0000585:a454c987-a596-4250-9058-9b78e580e9be", "row_index": 585, "timestamp": "2017-03-05T14:54:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a454c987-a596-4250-9058-9b78e580e9be", "eventTime": "2017-03-05T14:54:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28e5e2ba-ed81-427d-b18f-587267125820", "record_id": "flaws_cloudtrail:0000586:28e5e2ba-ed81-427d-b18f-587267125820", "row_index": 586, "timestamp": "2017-03-05T14:54:13Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28e5e2ba-ed81-427d-b18f-587267125820", "eventTime": "2017-03-05T14:54:13Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "001858-5688-411e-9eb5-3c7a792f599d", "record_id": "flaws_cloudtrail:0000587:001858-5688-411e-9eb5-3c7a792f599d", "row_index": 587, "timestamp": "2017-03-05T14:54:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "001858-5688-411e-9eb5-3c7a792f599d", "eventTime": "2017-03-05T14:54:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898fb5ba-e7bb-4c5a-9c84-a9f957931dbb", "record_id": "flaws_cloudtrail:0000588:898fb5ba-e7bb-4c5a-9c84-a9f957931dbb", "row_index": 588, "timestamp": "2017-03-05T14:54:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898fb5ba-e7bb-4c5a-9c84-a9f957931dbb", "eventTime": "2017-03-05T14:54:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a99de6b-28a7-4b23-b5d0-9b71851def", "record_id": "flaws_cloudtrail:0000589:9a99de6b-28a7-4b23-b5d0-9b71851def", "row_index": 589, "timestamp": "2017-03-05T14:54:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a99de6b-28a7-4b23-b5d0-9b71851def", "eventTime": "2017-03-05T14:54:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67753af-a1c2-4693-97bf-4755ec3dd164", "record_id": "flaws_cloudtrail:0000590:67753af-a1c2-4693-97bf-4755ec3dd164", "row_index": 590, "timestamp": "2017-03-05T14:54:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA84NILM8ZRV8DYLUN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67753af-a1c2-4693-97bf-4755ec3dd164", "eventTime": "2017-03-05T14:54:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA84NILM8ZRV8DYLUN", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:54:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7345ffc4-c7ec-43d2-bc0b-e077ac19421a", "record_id": "flaws_cloudtrail:0000591:7345ffc4-c7ec-43d2-bc0b-e077ac19421a", "row_index": 591, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7345ffc4-c7ec-43d2-bc0b-e077ac19421a", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14258bca-6bbb-4b7d-9000-ab484210efa", "record_id": "flaws_cloudtrail:0000592:14258bca-6bbb-4b7d-9000-ab484210efa", "row_index": 592, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14258bca-6bbb-4b7d-9000-ab484210efa", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc238ad9-d7ea-456b-a2b7-b7d8450d63e4", "record_id": "flaws_cloudtrail:0000593:dc238ad9-d7ea-456b-a2b7-b7d8450d63e4", "row_index": 593, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAXHI3AYXD6LAK1Q70", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc238ad9-d7ea-456b-a2b7-b7d8450d63e4", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXHI3AYXD6LAK1Q70", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:54:17Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6142cd23-f1c6-4612-9926-a4a893dc3ba8", "record_id": "flaws_cloudtrail:0000594:6142cd23-f1c6-4612-9926-a4a893dc3ba8", "row_index": 594, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6142cd23-f1c6-4612-9926-a4a893dc3ba8", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "befc8843-79c9-471c-82fe-45c8d66837cf", "record_id": "flaws_cloudtrail:0000595:befc8843-79c9-471c-82fe-45c8d66837cf", "row_index": 595, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "befc8843-79c9-471c-82fe-45c8d66837cf", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f02b980d-5ea9-4970-816a-7faa84fb29f4", "record_id": "flaws_cloudtrail:0000596:f02b980d-5ea9-4970-816a-7faa84fb29f4", "row_index": 596, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f02b980d-5ea9-4970-816a-7faa84fb29f4", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31ec3e7-dbc0-46f0-bad4-694a92442d89", "record_id": "flaws_cloudtrail:0000597:b31ec3e7-dbc0-46f0-bad4-694a92442d89", "row_index": 597, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31ec3e7-dbc0-46f0-bad4-694a92442d89", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56390c6-6593-4a58-ae58-2d123595ee47d", "record_id": "flaws_cloudtrail:0000598:56390c6-6593-4a58-ae58-2d123595ee47d", "row_index": 598, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56390c6-6593-4a58-ae58-2d123595ee47d", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0cc642e-da1c-4b54-9ff3-8277da3a3f9f", "record_id": "flaws_cloudtrail:0000599:d0cc642e-da1c-4b54-9ff3-8277da3a3f9f", "row_index": 599, "timestamp": "2017-03-05T14:54:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0cc642e-da1c-4b54-9ff3-8277da3a3f9f", "eventTime": "2017-03-05T14:54:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f7d505-a0b8-43d2-be54-a60a29b37e4b", "record_id": "flaws_cloudtrail:0000600:a7f7d505-a0b8-43d2-be54-a60a29b37e4b", "row_index": 600, "timestamp": "2017-03-05T14:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f7d505-a0b8-43d2-be54-a60a29b37e4b", "eventTime": "2017-03-05T14:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91b1ebdf-5364-4ab5-a5fb-0173c2f84138", "record_id": "flaws_cloudtrail:0000601:91b1ebdf-5364-4ab5-a5fb-0173c2f84138", "row_index": 601, "timestamp": "2017-03-05T14:54:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91b1ebdf-5364-4ab5-a5fb-0173c2f84138", "eventTime": "2017-03-05T14:54:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44fab3a8-913c-49ea-b284-9a1424f0c5a6", "record_id": "flaws_cloudtrail:0000602:44fab3a8-913c-49ea-b284-9a1424f0c5a6", "row_index": 602, "timestamp": "2017-03-05T14:54:19Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVX3WWR3MPOKZJI1Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44fab3a8-913c-49ea-b284-9a1424f0c5a6", "eventTime": "2017-03-05T14:54:19Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVX3WWR3MPOKZJI1Y", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-05T14:54:19Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acea1510-85bd-4239-99e5-bd511c6dab0c", "record_id": "flaws_cloudtrail:0000603:acea1510-85bd-4239-99e5-bd511c6dab0c", "row_index": 603, "timestamp": "2017-03-05T14:54:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acea1510-85bd-4239-99e5-bd511c6dab0c", "eventTime": "2017-03-05T14:54:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb4edc33-30b9-476f-8df3-782cc35d8d2d", "record_id": "flaws_cloudtrail:0000604:eb4edc33-30b9-476f-8df3-782cc35d8d2d", "row_index": 604, "timestamp": "2017-03-05T14:54:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb4edc33-30b9-476f-8df3-782cc35d8d2d", "eventTime": "2017-03-05T14:54:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24f250a5-619c-4d83-bca0-ec40d1a56362", "record_id": "flaws_cloudtrail:0000605:24f250a5-619c-4d83-bca0-ec40d1a56362", "row_index": 605, "timestamp": "2017-03-05T14:54:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.123.210.192", "user_agent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24f250a5-619c-4d83-bca0-ec40d1a56362", "eventTime": "2017-03-05T14:54:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.123.210.192", "userAgent": "Boto3/1.4.4 Python/2.7.6 Linux/3.19.0-32-generic Botocore/1.5.7", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}