Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f49cb05c-85dc-4c80-991e-d926bfa99535", "record_id": "flaws_cloudtrail:0000000:f49cb05c-85dc-4c80-991e-d926bfa99535", "row_index": 0, "timestamp": "2017-03-11T02:26:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f49cb05c-85dc-4c80-991e-d926bfa99535", "eventTime": "2017-03-11T02:26:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa352c90-5006-4ddb-add7-ba583f2998ab", "record_id": "flaws_cloudtrail:0000001:aa352c90-5006-4ddb-add7-ba583f2998ab", "row_index": 1, "timestamp": "2017-03-11T02:27:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa352c90-5006-4ddb-add7-ba583f2998ab", "eventTime": "2017-03-11T02:27:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user AIDA9BO36HFBHKGJAO9C1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd981cb-e955-4057-a6a4-a6d1d0426e35", "record_id": "flaws_cloudtrail:0000002:3cd981cb-e955-4057-a6a4-a6d1d0426e35", "row_index": 2, "timestamp": "2017-03-11T02:32:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd981cb-e955-4057-a6a4-a6d1d0426e35", "eventTime": "2017-03-11T02:32:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZLVDCH1TEPN90Q2A", "expiration": "Mar 11, 2017 8:41:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0a4f0bc-d099-4be0-b053-14914f6235f", "record_id": "flaws_cloudtrail:0000003:a0a4f0bc-d099-4be0-b053-14914f6235f", "row_index": 3, "timestamp": "2017-03-11T02:34:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0a4f0bc-d099-4be0-b053-14914f6235f", "eventTime": "2017-03-11T02:34:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c32a4691-0b07-4667-97f5-a59252", "record_id": "flaws_cloudtrail:0000004:c32a4691-0b07-4667-97f5-a59252", "row_index": 4, "timestamp": "2017-03-11T02:35:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c32a4691-0b07-4667-97f5-a59252", "eventTime": "2017-03-11T02:35:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f59b0d5-d008-4c03-9d00-9b910daf6aa4", "record_id": "flaws_cloudtrail:0000005:1f59b0d5-d008-4c03-9d00-9b910daf6aa4", "row_index": 5, "timestamp": "2017-03-11T02:35:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f59b0d5-d008-4c03-9d00-9b910daf6aa4", "eventTime": "2017-03-11T02:35:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c49649be-dc86-4a0c-b44f-094529e16485", "record_id": "flaws_cloudtrail:0000006:c49649be-dc86-4a0c-b44f-094529e16485", "row_index": 6, "timestamp": "2017-03-11T02:35:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c49649be-dc86-4a0c-b44f-094529e16485", "eventTime": "2017-03-11T02:35:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d067deda-86b6-4f27-a820-55f90440fded", "record_id": "flaws_cloudtrail:0000007:d067deda-86b6-4f27-a820-55f90440fded", "row_index": 7, "timestamp": "2017-03-11T02:36:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d067deda-86b6-4f27-a820-55f90440fded", "eventTime": "2017-03-11T02:36:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "567d526b-6412-40bf-870a-57d3dd5756ce", "record_id": "flaws_cloudtrail:0000008:567d526b-6412-40bf-870a-57d3dd5756ce", "row_index": 8, "timestamp": "2017-03-11T02:36:46Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "567d526b-6412-40bf-870a-57d3dd5756ce", "eventTime": "2017-03-11T02:36:46Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b2272b7-db90-40c6-a14d-cbceef64124c", "record_id": "flaws_cloudtrail:0000009:2b2272b7-db90-40c6-a14d-cbceef64124c", "row_index": 9, "timestamp": "2017-03-11T02:37:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b2272b7-db90-40c6-a14d-cbceef64124c", "eventTime": "2017-03-11T02:37:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a104258-6bda-42ae-a8dc-85c9c4ed4fc3", "record_id": "flaws_cloudtrail:0000010:03a104258-6bda-42ae-a8dc-85c9c4ed4fc3", "row_index": 10, "timestamp": "2017-03-11T02:37:47Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a104258-6bda-42ae-a8dc-85c9c4ed4fc3", "eventTime": "2017-03-11T02:37:47Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-f7054cea"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17422c4f-23d7-4e23-bd08-65b8d4dfa9bb", "record_id": "flaws_cloudtrail:0000011:17422c4f-23d7-4e23-bd08-65b8d4dfa9bb", "row_index": 11, "timestamp": "2017-03-11T02:38:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17422c4f-23d7-4e23-bd08-65b8d4dfa9bb", "eventTime": "2017-03-11T02:38:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7960b736-e4bf-4835-97d8-229b81b43c24", "record_id": "flaws_cloudtrail:0000012:7960b736-e4bf-4835-97d8-229b81b43c24", "row_index": 12, "timestamp": "2017-03-11T02:39:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7960b736-e4bf-4835-97d8-229b81b43c24", "eventTime": "2017-03-11T02:39:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c0b594-d06e-42ec-8af2-56e3f883808cb", "record_id": "flaws_cloudtrail:0000013:b8c0b594-d06e-42ec-8af2-56e3f883808cb", "row_index": 13, "timestamp": "2017-03-11T03:00:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "255.252.231.7", "user_agent": "[aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c0b594-d06e-42ec-8af2-56e3f883808cb", "eventTime": "2017-03-11T03:00:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "[aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T02:32:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f035528b2-81d1-4013-b10f-c5a429d24508", "record_id": "flaws_cloudtrail:0000014:f035528b2-81d1-4013-b10f-c5a429d24508", "row_index": 14, "timestamp": "2017-03-11T03:04:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f035528b2-81d1-4013-b10f-c5a429d24508", "eventTime": "2017-03-11T03:04:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac4dda2-0df2-40b8-b635-93203a058fba", "record_id": "flaws_cloudtrail:0000015:2ac4dda2-0df2-40b8-b635-93203a058fba", "row_index": 15, "timestamp": "2017-03-11T03:04:47Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac4dda2-0df2-40b8-b635-93203a058fba", "eventTime": "2017-03-11T03:04:47Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee2b437e-6714-4649-9f3d-cd3ef5bcdde0", "record_id": "flaws_cloudtrail:0000016:ee2b437e-6714-4649-9f3d-cd3ef5bcdde0", "row_index": 16, "timestamp": "2017-03-11T03:06:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee2b437e-6714-4649-9f3d-cd3ef5bcdde0", "eventTime": "2017-03-11T03:06:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22d89e5f-0f8f-4d76-91ed-18032c75458c", "record_id": "flaws_cloudtrail:0000017:22d89e5f-0f8f-4d76-91ed-18032c75458c", "row_index": 17, "timestamp": "2017-03-11T03:06:38Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22d89e5f-0f8f-4d76-91ed-18032c75458c", "eventTime": "2017-03-11T03:06:38Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c53653c-dc74-4e2f-ad97-0b92eea4992b", "record_id": "flaws_cloudtrail:0000018:c53653c-dc74-4e2f-ad97-0b92eea4992b", "row_index": 18, "timestamp": "2017-03-11T03:07:11Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c53653c-dc74-4e2f-ad97-0b92eea4992b", "eventTime": "2017-03-11T03:07:11Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e4ddbea-8ca1-42c7-9bd7-c1a4c203f783", "record_id": "flaws_cloudtrail:0000019:8e4ddbea-8ca1-42c7-9bd7-c1a4c203f783", "row_index": 19, "timestamp": "2017-03-11T03:08:31Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e4ddbea-8ca1-42c7-9bd7-c1a4c203f783", "eventTime": "2017-03-11T03:08:31Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name list_apigateways cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "list_apigateways", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ad5c9d-9624-4d8b-99a4-ff8da4da1f3e", "record_id": "flaws_cloudtrail:0000020:68ad5c9d-9624-4d8b-99a4-ff8da4da1f3e", "row_index": 20, "timestamp": "2017-03-11T03:08:47Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ad5c9d-9624-4d8b-99a4-ff8da4da1f3e", "eventTime": "2017-03-11T03:08:47Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c9d97a-c124-4fc9-ac41-2dc2f3f6d63d", "record_id": "flaws_cloudtrail:0000021:97c9d97a-c124-4fc9-ac41-2dc2f3f6d63d", "row_index": 21, "timestamp": "2017-03-11T03:10:14Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c9d97a-c124-4fc9-ac41-2dc2f3f6d63d", "eventTime": "2017-03-11T03:10:14Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59a62476-ce8c-495a-a19b-243c22a54a13", "record_id": "flaws_cloudtrail:0000022:59a62476-ce8c-495a-a19b-243c22a54a13", "row_index": 22, "timestamp": "2017-03-11T03:10:20Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59a62476-ce8c-495a-a19b-243c22a54a13", "eventTime": "2017-03-11T03:10:20Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Policy arn:aws:iam::811596193553:policy/SecurityAudit does not exist or is not attachable.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df3761ae-6447-40a5-a103-9f8669e716fb", "record_id": "flaws_cloudtrail:0000023:df3761ae-6447-40a5-a103-9f8669e716fb", "row_index": 23, "timestamp": "2017-03-11T03:10:36Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df3761ae-6447-40a5-a103-9f8669e716fb", "eventTime": "2017-03-11T03:10:36Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc1e59ed-9fe1-4811-b078-2ec029c81d97", "record_id": "flaws_cloudtrail:0000024:bc1e59ed-9fe1-4811-b078-2ec029c81d97", "row_index": 24, "timestamp": "2017-03-11T03:10:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1214, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc1e59ed-9fe1-4811-b078-2ec029c81d97", "eventTime": "2017-03-11T03:10:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUU8QRIXAVOEVINFF", "expiration": "Mar 11, 2017 3:10:39 PM", "sessionToken": "FQoDYXdzEGwaDM7bFw+eNOFM865DgCLfARzfZ75k32WW3qzsCLtGpo8eq6gxYXfLh2lbqUn94bTzuwnhMyK0lMobsL874cYqqyHnbP7eLBeXASUN7cYN0wqrAfSNR43eYkZomR4xGkQGAlXeUhS+d7cA71AUkZqHlDtTUNZ5aIg+XB6nvMM59NDh9Q06IjaO+xiEcB3D1CvOnjNLB+Ph/TLYrvRjeVGeZ9Uo2Lif2QaTdoTfc610besOxxLbg7ar1SSQqHKiN7bGjsE3TLNj3c+LlOZ8EtFX+P6CdXVtJRV7d4eZ4NkmNFdInj7eZViuC41myidqbzcor9WNxgU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47cb2e62-b131-4d33-aa19-7cc2e2c44e6c", "record_id": "flaws_cloudtrail:0000025:47cb2e62-b131-4d33-aa19-7cc2e2c44e6c", "row_index": 25, "timestamp": "2017-03-11T03:10:39Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAUU8QRIXAVOEVINFF", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "213.8.63.17", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47cb2e62-b131-4d33-aa19-7cc2e2c44e6c", "eventTime": "2017-03-11T03:10:39Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "213.8.63.17", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAUU8QRIXAVOEVINFF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T03:10:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2017/03/11/[$LATEST]384968a4c77208fbc5684bcf3d4eeef7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccd973f4-28de-4b59-99ae-e3d31220bbee", "record_id": "flaws_cloudtrail:0000026:ccd973f4-28de-4b59-99ae-e3d31220bbee", "row_index": 26, "timestamp": "2017-03-11T03:11:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccd973f4-28de-4b59-99ae-e3d31220bbee", "eventTime": "2017-03-11T03:11:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30463fdd-dc9f-4139-9219-5ede5632e1eb", "record_id": "flaws_cloudtrail:0000027:30463fdd-dc9f-4139-9219-5ede5632e1eb", "row_index": 27, "timestamp": "2017-03-11T03:12:36Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30463fdd-dc9f-4139-9219-5ede5632e1eb", "eventTime": "2017-03-11T03:12:36Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c8c7719-9a16-4b1c-975a-6d05462cd995", "record_id": "flaws_cloudtrail:0000028:5c8c7719-9a16-4b1c-975a-6d05462cd995", "row_index": 28, "timestamp": "2017-03-11T03:12:54Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c8c7719-9a16-4b1c-975a-6d05462cd995", "eventTime": "2017-03-11T03:12:54Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9453d811-a696-437b-bdf9-6307f01dbae4", "record_id": "flaws_cloudtrail:0000029:9453d811-a696-437b-bdf9-6307f01dbae4", "row_index": 29, "timestamp": "2017-03-11T03:13:29Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9453d811-a696-437b-bdf9-6307f01dbae4", "eventTime": "2017-03-11T03:13:29Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861465ab4-3fa8-44e9-9082-ee479f69a9a3", "record_id": "flaws_cloudtrail:0000030:861465ab4-3fa8-44e9-9082-ee479f69a9a3", "row_index": 30, "timestamp": "2017-03-11T03:13:37Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861465ab4-3fa8-44e9-9082-ee479f69a9a3", "eventTime": "2017-03-11T03:13:37Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66c640497-e18b-40bc-84e5-0d78b966cea3", "record_id": "flaws_cloudtrail:0000031:66c640497-e18b-40bc-84e5-0d78b966cea3", "row_index": 31, "timestamp": "2017-03-11T03:14:13Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66c640497-e18b-40bc-84e5-0d78b966cea3", "eventTime": "2017-03-11T03:14:13Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19aa0685-7295-4e5b-b158-0ee3cfc8289e", "record_id": "flaws_cloudtrail:0000032:19aa0685-7295-4e5b-b158-0ee3cfc8289e", "row_index": 32, "timestamp": "2017-03-11T03:14:32Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19aa0685-7295-4e5b-b158-0ee3cfc8289e", "eventTime": "2017-03-11T03:14:32Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c56b6c6-5c49-4075-bea0-fb375789dc9", "record_id": "flaws_cloudtrail:0000033:4c56b6c6-5c49-4075-bea0-fb375789dc9", "row_index": 33, "timestamp": "2017-03-11T03:14:42Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c56b6c6-5c49-4075-bea0-fb375789dc9", "eventTime": "2017-03-11T03:14:42Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c432e6-9cd4-43c6-a322-c87fa35b18d5", "record_id": "flaws_cloudtrail:0000034:97c432e6-9cd4-43c6-a322-c87fa35b18d5", "row_index": 34, "timestamp": "2017-03-11T03:14:47Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c432e6-9cd4-43c6-a322-c87fa35b18d5", "eventTime": "2017-03-11T03:14:47Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee31df6-d014-4874-9e31-3d2c557d5515", "record_id": "flaws_cloudtrail:0000035:eee31df6-d014-4874-9e31-3d2c557d5515", "row_index": 35, "timestamp": "2017-03-11T03:14:53Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee31df6-d014-4874-9e31-3d2c557d5515", "eventTime": "2017-03-11T03:14:53Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2045a65e-f9c2-49ba-9265-aa19198daae", "record_id": "flaws_cloudtrail:0000036:2045a65e-f9c2-49ba-9265-aa19198daae", "row_index": 36, "timestamp": "2017-03-11T03:15:25Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2045a65e-f9c2-49ba-9265-aa19198daae", "eventTime": "2017-03-11T03:15:25Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63d8ddfa-ce1a-485b-b9d3-951c76aa8d14", "record_id": "flaws_cloudtrail:0000037:63d8ddfa-ce1a-485b-b9d3-951c76aa8d14", "row_index": 37, "timestamp": "2017-03-11T03:15:32Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63d8ddfa-ce1a-485b-b9d3-951c76aa8d14", "eventTime": "2017-03-11T03:15:32Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb799b62-ca70-4b23-917c-64a162a46d54", "record_id": "flaws_cloudtrail:0000038:fb799b62-ca70-4b23-917c-64a162a46d54", "row_index": 38, "timestamp": "2017-03-11T03:15:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb799b62-ca70-4b23-917c-64a162a46d54", "eventTime": "2017-03-11T03:15:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2287dcc7-ea23-4c92-831a-630e3da85127", "record_id": "flaws_cloudtrail:0000039:2287dcc7-ea23-4c92-831a-630e3da85127", "row_index": 39, "timestamp": "2017-03-11T03:15:57Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2287dcc7-ea23-4c92-831a-630e3da85127", "eventTime": "2017-03-11T03:15:57Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c3595bd-1dd6-4e1c-91b3-18dfb46a42cb", "record_id": "flaws_cloudtrail:0000040:8c3595bd-1dd6-4e1c-91b3-18dfb46a42cb", "row_index": 40, "timestamp": "2017-03-11T03:16:01Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c3595bd-1dd6-4e1c-91b3-18dfb46a42cb", "eventTime": "2017-03-11T03:16:01Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a141a8c6-2487-4beb-a322-100245df65c", "record_id": "flaws_cloudtrail:0000041:a141a8c6-2487-4beb-a322-100245df65c", "row_index": 41, "timestamp": "2017-03-11T03:16:42Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a141a8c6-2487-4beb-a322-100245df65c", "eventTime": "2017-03-11T03:16:42Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c807ea6a-b053-4a59-b492-471d8a110fb3", "record_id": "flaws_cloudtrail:0000042:c807ea6a-b053-4a59-b492-471d8a110fb3", "row_index": 42, "timestamp": "2017-03-11T03:17:24Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c807ea6a-b053-4a59-b492-471d8a110fb3", "eventTime": "2017-03-11T03:17:24Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The role policy with name service-role cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "service-role", "roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8d67acf-986c-4ca5-b45d-b9d767027bb5", "record_id": "flaws_cloudtrail:0000043:d8d67acf-986c-4ca5-b45d-b9d767027bb5", "row_index": 43, "timestamp": "2017-03-11T03:18:06Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8d67acf-986c-4ca5-b45d-b9d767027bb5", "eventTime": "2017-03-11T03:18:06Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efae5abc-dd33-4a12-ba1c-2a6c9c871e03", "record_id": "flaws_cloudtrail:0000044:efae5abc-dd33-4a12-ba1c-2a6c9c871e03", "row_index": 44, "timestamp": "2017-03-11T03:19:22Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efae5abc-dd33-4a12-ba1c-2a6c9c871e03", "eventTime": "2017-03-11T03:19:22Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eadb9b00-4324-49f6-8c09-052c2efb0811", "record_id": "flaws_cloudtrail:0000045:eadb9b00-4324-49f6-8c09-052c2efb0811", "row_index": 45, "timestamp": "2017-03-11T03:19:23Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eadb9b00-4324-49f6-8c09-052c2efb0811", "eventTime": "2017-03-11T03:19:23Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AB+MwHtc/UjWvvoqqoZY4gtdrJA4E7ILU0lMGecEn6thHefso9+KwHA4C7oJjrPddBV15VOzpzrqy3V+hKyNiBXDskaP+mL3LZ9ld/8efyW7fg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f450383c-4172-43a0-8d74-c9355aab3cce", "record_id": "flaws_cloudtrail:0000046:f450383c-4172-43a0-8d74-c9355aab3cce", "row_index": 46, "timestamp": "2017-03-11T03:19:23Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f450383c-4172-43a0-8d74-c9355aab3cce", "eventTime": "2017-03-11T03:19:23Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAsDH9Au1am9UruxZCc+MC7ZTcob12oPv2blWpdicyH3O4iBBbNBrUw7WwR/6U/iMMeGMrDiXcVBz5K9X1tCT0YUcHg02ZzKD8jQWvmmoXdw5Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd34dc1-c540-4377-9926-45036c875016", "record_id": "flaws_cloudtrail:0000047:7cd34dc1-c540-4377-9926-45036c875016", "row_index": 47, "timestamp": "2017-03-11T03:19:42Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd34dc1-c540-4377-9926-45036c875016", "eventTime": "2017-03-11T03:19:42Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "536fe1d5-7b5e-47cf-8b63-0e311f01233", "record_id": "flaws_cloudtrail:0000048:536fe1d5-7b5e-47cf-8b63-0e311f01233", "row_index": 48, "timestamp": "2017-03-11T03:20:14Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "536fe1d5-7b5e-47cf-8b63-0e311f01233", "eventTime": "2017-03-11T03:20:14Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Role Level67 does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level67"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95fdaf5-0ef4-4d3e-8809-5c7b191ff6ce", "record_id": "flaws_cloudtrail:0000049:c95fdaf5-0ef4-4d3e-8809-5c7b191ff6ce", "row_index": 49, "timestamp": "2017-03-11T03:20:16Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95fdaf5-0ef4-4d3e-8809-5c7b191ff6ce", "eventTime": "2017-03-11T03:20:16Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22e758d4-9337-4639-abd4-2dcf67c56931", "record_id": "flaws_cloudtrail:0000050:22e758d4-9337-4639-abd4-2dcf67c56931", "row_index": 50, "timestamp": "2017-03-11T03:20:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22e758d4-9337-4639-abd4-2dcf67c56931", "eventTime": "2017-03-11T03:20:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABelmGPBi6i4Ssvh0uvyKg5jy9lgOnrlYloAxK9srUOAtz290F7ySE99YtundE+5r4cLD4usbWXk99VvsMkTUMxmcEB1LXreGUIS0+Gw+PO0tQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010904e04-65ba-4f1c-bd88-3d44d33a1f72", "record_id": "flaws_cloudtrail:0000051:010904e04-65ba-4f1c-bd88-3d44d33a1f72", "row_index": 51, "timestamp": "2017-03-11T03:20:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010904e04-65ba-4f1c-bd88-3d44d33a1f72", "eventTime": "2017-03-11T03:20:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a7cf4a-fd6a-4641-b89e-2b36587a14a1", "record_id": "flaws_cloudtrail:0000052:a1a7cf4a-fd6a-4641-b89e-2b36587a14a1", "row_index": 52, "timestamp": "2017-03-11T03:20:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a7cf4a-fd6a-4641-b89e-2b36587a14a1", "eventTime": "2017-03-11T03:20:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABcb6QgeZX0+uqTvzcM20iq5d0md6qmzWGhk7sY7iUm+Fg+vyoC6UnTmZiBQTty55kKupznV4Pf546Yzt+UNcO/5q/+rqDAV56ZWA4pkYFVdAw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "923202b7-a2ea-4646-a7ac-87ded04fff72", "record_id": "flaws_cloudtrail:0000053:923202b7-a2ea-4646-a7ac-87ded04fff72", "row_index": 53, "timestamp": "2017-03-11T03:21:04Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "923202b7-a2ea-4646-a7ac-87ded04fff72", "eventTime": "2017-03-11T03:21:04Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Role Level67 does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level67"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2166f90-6621-420a-9376-897f240715d42", "record_id": "flaws_cloudtrail:0000054:d2166f90-6621-420a-9376-897f240715d42", "row_index": 54, "timestamp": "2017-03-11T03:21:06Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2166f90-6621-420a-9376-897f240715d42", "eventTime": "2017-03-11T03:21:06Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e49a47-9c1e-40a4-81f5-b149336a00", "record_id": "flaws_cloudtrail:0000055:f6e49a47-9c1e-40a4-81f5-b149336a00", "row_index": 55, "timestamp": "2017-03-11T03:21:37Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e49a47-9c1e-40a4-81f5-b149336a00", "eventTime": "2017-03-11T03:21:37Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a174c437-ee59-4800-afda-1e66b1f703ef", "record_id": "flaws_cloudtrail:0000056:a174c437-ee59-4800-afda-1e66b1f703ef", "row_index": 56, "timestamp": "2017-03-11T03:21:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a174c437-ee59-4800-afda-1e66b1f703ef", "eventTime": "2017-03-11T03:21:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9108b950-889e-4cb4-9bf4-93f867b9656d", "record_id": "flaws_cloudtrail:0000057:9108b950-889e-4cb4-9bf4-93f867b9656d", "row_index": 57, "timestamp": "2017-03-11T03:22:17Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9108b950-889e-4cb4-9bf4-93f867b9656d", "eventTime": "2017-03-11T03:22:17Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bbb452-019c-4a2c-b3e7-807bb797a771", "record_id": "flaws_cloudtrail:0000058:d6bbb452-019c-4a2c-b3e7-807bb797a771", "row_index": 58, "timestamp": "2017-03-11T03:30:19Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bbb452-019c-4a2c-b3e7-807bb797a771", "eventTime": "2017-03-11T03:30:19Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf232be9-5d2a-4468-81e7-8acf10db79f9", "record_id": "flaws_cloudtrail:0000059:bf232be9-5d2a-4468-81e7-8acf10db79f9", "row_index": 59, "timestamp": "2017-03-11T03:31:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf232be9-5d2a-4468-81e7-8acf10db79f9", "eventTime": "2017-03-11T03:31:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d8fee8b-693a-499e-a511-2a42b11295b", "record_id": "flaws_cloudtrail:0000060:1d8fee8b-693a-499e-a511-2a42b11295b", "row_index": 60, "timestamp": "2017-03-11T03:31:40Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d8fee8b-693a-499e-a511-2a42b11295b", "eventTime": "2017-03-11T03:31:40Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name list_apigateways cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "list_apigateways", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86033-355c-4db9-afad-1cb0839771dc", "record_id": "flaws_cloudtrail:0000061:86033-355c-4db9-afad-1cb0839771dc", "row_index": 61, "timestamp": "2017-03-11T03:32:01Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86033-355c-4db9-afad-1cb0839771dc", "eventTime": "2017-03-11T03:32:01Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d2ab98f-3929-4ba3-a787-1053e02b1cb6", "record_id": "flaws_cloudtrail:0000062:7d2ab98f-3929-4ba3-a787-1053e02b1cb6", "row_index": 62, "timestamp": "2017-03-11T03:32:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d2ab98f-3929-4ba3-a787-1053e02b1cb6", "eventTime": "2017-03-11T03:32:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ed750eb-84e9-42ea-8d91-27300f68f52a", "record_id": "flaws_cloudtrail:0000063:8ed750eb-84e9-42ea-8d91-27300f68f52a", "row_index": 63, "timestamp": "2017-03-11T03:32:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ed750eb-84e9-42ea-8d91-27300f68f52a", "eventTime": "2017-03-11T03:32:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXK7SUMAVD754H6YK", "expiration": "Mar 11, 2017 9:44:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eedcfa7a-f433-4601-a3c3-157419fbcd4", "record_id": "flaws_cloudtrail:0000064:eedcfa7a-f433-4601-a3c3-157419fbcd4", "row_index": 64, "timestamp": "2017-03-11T03:32:55Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eedcfa7a-f433-4601-a3c3-157419fbcd4", "eventTime": "2017-03-11T03:32:55Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c880aba-42fc-4517-b39f-a7cff2b4e499", "record_id": "flaws_cloudtrail:0000065:4c880aba-42fc-4517-b39f-a7cff2b4e499", "row_index": 65, "timestamp": "2017-03-11T03:33:16Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.252.231.7", "user_agent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c880aba-42fc-4517-b39f-a7cff2b4e499", "eventTime": "2017-03-11T03:33:16Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.252.231.7", "userAgent": "aws-cli/1.11.61 Python/2.7.12 CYGWIN_NT-10.0/2.6.1(0.305/5/3) botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc46569b-534a-4d39-b15e-dcf3f99ee1b1", "record_id": "flaws_cloudtrail:0000066:bc46569b-534a-4d39-b15e-dcf3f99ee1b1", "row_index": 66, "timestamp": "2017-03-11T04:32:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc46569b-534a-4d39-b15e-dcf3f99ee1b1", "eventTime": "2017-03-11T04:32:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKQNGOL87IQ6A4FX6", "expiration": "Mar 11, 2017 11:00:30 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b05f80dd-1e23-495c-a9f5-c805c433387ca", "record_id": "flaws_cloudtrail:0000067:b05f80dd-1e23-495c-a9f5-c805c433387ca", "row_index": 67, "timestamp": "2017-03-11T04:32:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b05f80dd-1e23-495c-a9f5-c805c433387ca", "eventTime": "2017-03-11T04:32:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1dad6ff-bc5c-4dab-a5f3-39934f63914", "record_id": "flaws_cloudtrail:0000068:d1dad6ff-bc5c-4dab-a5f3-39934f63914", "row_index": 68, "timestamp": "2017-03-11T04:35:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1dad6ff-bc5c-4dab-a5f3-39934f63914", "eventTime": "2017-03-11T04:35:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "192211ebe-bcca-4e66-818c-f47874937946", "record_id": "flaws_cloudtrail:0000069:192211ebe-bcca-4e66-818c-f47874937946", "row_index": 69, "timestamp": "2017-03-11T04:36:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "192211ebe-bcca-4e66-818c-f47874937946", "eventTime": "2017-03-11T04:36:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee8c70e-79bb-43f9-bb74-b7aabea4e009", "record_id": "flaws_cloudtrail:0000070:eee8c70e-79bb-43f9-bb74-b7aabea4e009", "row_index": 70, "timestamp": "2017-03-11T04:36:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee8c70e-79bb-43f9-bb74-b7aabea4e009", "eventTime": "2017-03-11T04:36:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d428d45-e237-472d-b047-86616d1cebd", "record_id": "flaws_cloudtrail:0000071:9d428d45-e237-472d-b047-86616d1cebd", "row_index": 71, "timestamp": "2017-03-11T04:38:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d428d45-e237-472d-b047-86616d1cebd", "eventTime": "2017-03-11T04:38:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83ed35ff-7462-4a10-b0cb-7841c699b89b", "record_id": "flaws_cloudtrail:0000072:83ed35ff-7462-4a10-b0cb-7841c699b89b", "row_index": 72, "timestamp": "2017-03-11T04:39:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83ed35ff-7462-4a10-b0cb-7841c699b89b", "eventTime": "2017-03-11T04:39:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ab0124-035f-4405-a60c-a1b9ac7e8771", "record_id": "flaws_cloudtrail:0000073:65ab0124-035f-4405-a60c-a1b9ac7e8771", "row_index": 73, "timestamp": "2017-03-11T04:39:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ab0124-035f-4405-a60c-a1b9ac7e8771", "eventTime": "2017-03-11T04:39:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpTW03cldwUFlKODRHVkp5WmRwUFhCWlVBdFhpaUQ4ekUzZU5pVHBtN3BZZjgrOEFqSWxQVUNzZWVYdU83a1djcnNYV0x5Z21HcVFhb2xBYXJmOGVoTVpETmRyNjhML0pwVzhleHd3WUo4YXZRVmVQcDlORzlOWWt4ajZqM0duWjFyeXAwdnlNZmdWeGxoYlEza1NPcWFNYXlnTDU4WFhLME45RHdWZE92MmRyeUNJemRsb0RKTXpYK2FSMiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d9c578b-3dd7-49b4-91b5-6db11782d80", "record_id": "flaws_cloudtrail:0000074:3d9c578b-3dd7-49b4-91b5-6db11782d80", "row_index": 74, "timestamp": "2017-03-11T04:39:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d9c578b-3dd7-49b4-91b5-6db11782d80", "eventTime": "2017-03-11T04:39:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOSVMvLy9CYUsyOUNpWExoT1Q0OGtZdTVzOWw0VmdGTjBQSGhZdkQrUlo1UlEzRjRwWTYxY1hUOC81VlRDbXU2Sm9PS0JZYzZoc3lpQmQrUWZtNEYxSmhjZGxSd1VOUW5EcW5VM2sxaGozL1hMQTR1RkRySlN1ekJFRHdvaFpncHAyTjQ5N3lxTFA5R0dQR2x1RUFjeVVoRFNlelJrZFpSTTZHSElhdFBOUHpzSTh0UFp2STlYVmJxRDBxaSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e18576-a5d2-431a-bdb0-af4ecd54322", "record_id": "flaws_cloudtrail:0000075:56e18576-a5d2-431a-bdb0-af4ecd54322", "row_index": 75, "timestamp": "2017-03-11T04:39:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e18576-a5d2-431a-bdb0-af4ecd54322", "eventTime": "2017-03-11T04:39:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkT0tIbUUvWG40VXBmZnk3UkVLVStlWjY3bm5Ba1dsRnNRa0pUejFaeitQSUhueXROenNRZ0preEY4M1dMb29qZHA4VU5ObExhbkJOaG8vQldBOHNnSWR4TnRnNlJZTkhndlhxRStPcUYwd3M0YXFUUHBKSW9BOHV6SUc0Wmc5SHN2TzFwUmRpVzdOc3hPUDJmRml3Z21ma1BuSVZXa09xOWlCTXJyUldTZTZEQmd0Q3B1VXBXeTVYdC9saSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1621a01-b57a-4b7a-b5ed-7ae76c7587f7", "record_id": "flaws_cloudtrail:0000076:b1621a01-b57a-4b7a-b5ed-7ae76c7587f7", "row_index": 76, "timestamp": "2017-03-11T04:40:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1621a01-b57a-4b7a-b5ed-7ae76c7587f7", "eventTime": "2017-03-11T04:40:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDVDR4MS9HQWlzRitTYmlmajZWUHhZcXE1Z1pwMXJXRG43ekVaMmV2UTg0cXhNU0hZSXY5MGdHaWd3RzA0YTUrM056VkpJQ3R0ZjE3Y0NsR0lwVkU2YjZDbktjTFhYbXpReWdmVmoyUCtpaHh1UlhUdHhqV3VVTTJLa2xOeDlsK0o4MDYyTFZwYmdHby9malJIUEdoczZ4ZE1PczFTelcxcjBSQ3l4WXoyZW5HWjB0b3M1SG9EdGJPOWc9PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "874156e1-9696-4ffb-bb2a-bcab7622d58f", "record_id": "flaws_cloudtrail:0000077:874156e1-9696-4ffb-bb2a-bcab7622d58f", "row_index": 77, "timestamp": "2017-03-11T04:40:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "874156e1-9696-4ffb-bb2a-bcab7622d58f", "eventTime": "2017-03-11T04:40:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnaVdHYmpUOEtjY2V3L2x3QW5rWjdSenZzaTBlM1c0YXJLWXJBRlR3Yi8xVlo4WTNnRTRrc2g5V1RVVU9uVUtZZmVSODVBNkFnc0hic3VzN1JhNmFncDZ5ZThpQkJFWjdXMllNVHU5emtoLzhDVXdOQWxwdUQ5RHdOdnFlVEE4NERVeTF1bkdBSVRUb1djVlRLRGhtZm1WRG9FUTZ3Z2ZPNmtZdExFd3VyTytmUjUvcDk0RXpVRVVuYk0zTyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0752a0f0-a35b-4d0b-bb60-a8c08b7244a6", "record_id": "flaws_cloudtrail:0000078:0752a0f0-a35b-4d0b-bb60-a8c08b7244a6", "row_index": 78, "timestamp": "2017-03-11T04:40:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0752a0f0-a35b-4d0b-bb60-a8c08b7244a6", "eventTime": "2017-03-11T04:40:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZajlFcHlqMU9zNFFEalZxMmUvRjdZMXVpVHBaaG90WGJ6cVlnbHA1QkcrQTdzeEgwTFloY2dDZVdLWkVJcWo0VnZLVnJQNVBpTTdPeUEvdWFWODU3UTZkWjQ1YmIrWS9XbHJ0QzNsSTVNNHhYYUFpcFJPU08yTlVPSVBQcU1CYys4WTU5SkptYkFseTVqS1pTZCtCZElGK2k1cFlLSVFVQ2tWai9jWG13VkhHZnhnVGEvaWJSZTNmcFpwMyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54f27218-bb40-4bf8-9e8f-8bc18824a11a", "record_id": "flaws_cloudtrail:0000079:54f27218-bb40-4bf8-9e8f-8bc18824a11a", "row_index": 79, "timestamp": "2017-03-11T04:40:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54f27218-bb40-4bf8-9e8f-8bc18824a11a", "eventTime": "2017-03-11T04:40:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Y3MvWklFdWZocWZTbkNSbE5uOE40THBFQWJNQmZQU0RJSlhUWVFIUlE2dVh5ajlHQkhjdEV2d2J4NDFRZXBZWUY3VTI0ZHZDR1ppVk5iY0NkNE5Jc05icmVXY0M3QVlpbEMxYmNwY2J0d1FUM0J1MWk0bWU5UHU4cC9zZlkxZkhhRjhINnBuc29YTlBhTmR6djRNSmxUS3Z0b0d4VThGeGFMTUs4TW1raTdmTWhhR2h3Y0R2SGVQTWhBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0987d8b6-c417-4ec2-86b5-d927724c47d2e", "record_id": "flaws_cloudtrail:0000080:0987d8b6-c417-4ec2-86b5-d927724c47d2e", "row_index": 80, "timestamp": "2017-03-11T04:41:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0987d8b6-c417-4ec2-86b5-d927724c47d2e", "eventTime": "2017-03-11T04:41:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f146a58-eb5d-4395-a210-60466f029aed", "record_id": "flaws_cloudtrail:0000081:8f146a58-eb5d-4395-a210-60466f029aed", "row_index": 81, "timestamp": "2017-03-11T04:41:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f146a58-eb5d-4395-a210-60466f029aed", "eventTime": "2017-03-11T04:41:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "start-time", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "658bb422-3bc6-4b34-8bd1-d4a0547e71fa", "record_id": "flaws_cloudtrail:0000082:658bb422-3bc6-4b34-8bd1-d4a0547e71fa", "row_index": 82, "timestamp": "2017-03-11T04:42:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "658bb422-3bc6-4b34-8bd1-d4a0547e71fa", "eventTime": "2017-03-11T04:42:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "start-time", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35b4d47a-26e2-4069-aba5-3bfc896190", "record_id": "flaws_cloudtrail:0000083:35b4d47a-26e2-4069-aba5-3bfc896190", "row_index": 83, "timestamp": "2017-03-11T04:42:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35b4d47a-26e2-4069-aba5-3bfc896190", "eventTime": "2017-03-11T04:42:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "start-time", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be66cf6a-3423-4ea6-8da0-12f24e03ddea", "record_id": "flaws_cloudtrail:0000084:be66cf6a-3423-4ea6-8da0-12f24e03ddea", "row_index": 84, "timestamp": "2017-03-11T04:43:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be66cf6a-3423-4ea6-8da0-12f24e03ddea", "eventTime": "2017-03-11T04:43:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e674241-fde5-446f-a280-36f0afa7095f", "record_id": "flaws_cloudtrail:0000085:73e674241-fde5-446f-a280-36f0afa7095f", "row_index": 85, "timestamp": "2017-03-11T04:43:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e674241-fde5-446f-a280-36f0afa7095f", "eventTime": "2017-03-11T04:43:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1U2JUVVFqUzk2WWV0a0VQWCsxUjVBNlJIdzlweDQ3V3c2SndhUnVZRUxtWUlRTkdweUVzdy9Mc1JDTEVpVllxQWlzUi9VZWt1THFZVzVGVTdiUEJXWlVxbmpNSUFqc2dMbldwQXBIMjRZZCtiazk3bWdzYUcxMFFzcWN4a0RsQTJkSEpWZWVkVEg1VkV3cVFnb0tLbE5JamQ2blp0U2JlVXhRd3Fyd25BemI1TndwZWcyT240QTIrK0x3aiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036314-e6c3-4877-98eb-58354004f9bd", "record_id": "flaws_cloudtrail:0000086:036314-e6c3-4877-98eb-58354004f9bd", "row_index": 86, "timestamp": "2017-03-11T04:43:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036314-e6c3-4877-98eb-58354004f9bd", "eventTime": "2017-03-11T04:43:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrK2l3eE9TRWR4eDR0SDUxSzBPbVkzaC9adFQzcGpzcXJnVzR0bmxoMWphK3V6MHJwNGFEMVpLU2VyOWJYNENZUlZwMEZOb1d4OUZycUk2a3lJMEdOWC9rL3B0dHluMmF4eGliRkNxTnovQUM1dnBOdWVWbzB3WUFPeEMwcDdKVkRUNFYxMVk1aE1IVHRZNlp1M2lML3R5c2I2bkUzT1A2WXlWakF6TzlZR25tbWtGdElqRWlQNE5EWFh3UCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fbeef10-4d13-4890-99db-125d959c9ab4", "record_id": "flaws_cloudtrail:0000087:2fbeef10-4d13-4890-99db-125d959c9ab4", "row_index": 87, "timestamp": "2017-03-11T04:43:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fbeef10-4d13-4890-99db-125d959c9ab4", "eventTime": "2017-03-11T04:43:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4aHl0WmVJVDRRTlR5eHRTcGtRaDl6Q0ZBRVNtRGJmNGJXT25qdndRWTVibFQ1YVVFQmJQRU8yVDdkOThDaDIyVlZtSDczODZ3QVpCSmNrSytNOWtyaE03K01MYjZpSDQ4L3FvT0FwY2dEQkh1d3AvaExJRjE4ZW5wU1gxT0RBdkN2UmtmZnlvZVlCMk9MSC9OZ29ZRkNKajVzZ05NME5oNjdybURHT2VUYWwzV0xiVEZMSUpYakdzRDgwdCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff53540f-6a77-47d2-9334-787cd63bdead", "record_id": "flaws_cloudtrail:0000088:ff53540f-6a77-47d2-9334-787cd63bdead", "row_index": 88, "timestamp": "2017-03-11T04:43:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff53540f-6a77-47d2-9334-787cd63bdead", "eventTime": "2017-03-11T04:43:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUMmhrVlA4Y09jM1VFalpRUlJuSnBETEtlSmxRSXNaYklnMk9rZGJSZHp5T1Y2VEs2V3FvaTgrM3lOOHBnaFJKRXh1cThmY3I5MGkrNmRNNGorOU82N0lvODR5QXdwSjBVdEFxWHNaSThFa2JYMXdxeFNvQU5lSWt6UFk1YS9OdlY2YWlPbTh6NHF1bXNjb1JDMHl3QUhpS05UdVhvZElOT2dSOGF5YnZYL2ltajlNOFNPdlcrd0lMSGc9PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0480d6d6-c32c-4c97-82c6-6b4bff4fb42f", "record_id": "flaws_cloudtrail:0000089:0480d6d6-c32c-4c97-82c6-6b4bff4fb42f", "row_index": 89, "timestamp": "2017-03-11T04:44:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0480d6d6-c32c-4c97-82c6-6b4bff4fb42f", "eventTime": "2017-03-11T04:44:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6VytEMXh0RWdiM3ZHR0ZzbWliNFhoUkhrZUZ5a0Y0SEtISXBnMy9pazVrRDdPR1c4aWVDWDlvRFphd0d1aDdZeU9xMUFCWTVIY2ZXcHVFU3RvUzloK0s2ajRERHgyOWxQbUdqeU9uQ3R1Zi9MdVQ1azBsQkp5eFlVRzNvQk5CcU5paWxtNnJzSmtwUDdSZitrS09pNUtWT2FLN28vNEI2TDNRSnQ0SmJ2TTg5c3BjZVBtby9rS3RxYmkrVSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af9c2b93-639a-4311-bd16-0543e82471b6", "record_id": "flaws_cloudtrail:0000090:af9c2b93-639a-4311-bd16-0543e82471b6", "row_index": 90, "timestamp": "2017-03-11T04:44:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af9c2b93-639a-4311-bd16-0543e82471b6", "eventTime": "2017-03-11T04:44:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6dlF1dDd5U1ZLa0JoSUFXdC8yM0hOcTA3WDFxNlAvYkxrMXEzbTBkb1RlYVlUbVFBUkZ6ZmdGM1Fkd1N5OXF1Z0FzYnZ1LzdZa1hweGFRcHJFOEhZS3FCZld1RGxBckZqL2RwZjBZRjNBUlhrRzNMZlZ0UVpZOXo1d21TbHhiK05oamNsYythVmU3RnRFYkkwUUtManFFVkdFWFpSS1BXRkJwc2RFcUR5UmZnM1pFMWVqMzJ3NmJrMzdwYiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec910eb0-abd5-4408-a169-b68e5434ec49", "record_id": "flaws_cloudtrail:0000091:ec910eb0-abd5-4408-a169-b68e5434ec49", "row_index": 91, "timestamp": "2017-03-11T04:44:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec910eb0-abd5-4408-a169-b68e5434ec49", "eventTime": "2017-03-11T04:44:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjb096MytYMENsdEJsdFJJYVo1NDNaRUtnYndUQTgxVzZZYmp3UHFyNy9WQWlWUFZGVUt1c0VsK05ZbWtzZU1OZmJneEY0TjdIcUduRXFydmFYOGQ5Mi9neHZKd3ZxdWZJMHNaUE9ZK2NUY1poaEIwbW5NWno1cEdXeWxqZDVsUE1rb0xKbHI0a0hBT2ZSSllYKy9Rb2lWRzFuRnJzZkgxNjNSQkpXUU5nL1ZkUkRrUzV2TkpjOE9SVGFnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06697e-6c31-476a-95cd-094dcb49777c", "record_id": "flaws_cloudtrail:0000092:06697e-6c31-476a-95cd-094dcb49777c", "row_index": 92, "timestamp": "2017-03-11T04:45:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06697e-6c31-476a-95cd-094dcb49777c", "eventTime": "2017-03-11T04:45:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b99b1efe-1151-4d4f-bbf5-d23078c94e00", "record_id": "flaws_cloudtrail:0000093:b99b1efe-1151-4d4f-bbf5-d23078c94e00", "row_index": 93, "timestamp": "2017-03-11T04:45:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b99b1efe-1151-4d4f-bbf5-d23078c94e00", "eventTime": "2017-03-11T04:45:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqZ3ZDUyt1ZnJhbUhmbXRPaG5WcU9XS3RWdmd2WkhiZVhvbmxsSEtOMjczVU9ZanVtUDhscVpnMHBkbDFzZEhWcDJDY2UzdEcyejdoTjFWV1NLeExuc1NoNkhKQzcvM3FPY1hiZ2ZBcFlWMTNMUk1SNWhQZ01MQTFvOXd1QW1LSE16bm9ZUU96T2xqWHJBYmNCakZQOEJlenJTYTFEVnlqcENld1k2b0E4T1FreXVuQmxmUUpHM00yS3hjQSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "078084a1c-7be6-4db5-85be-e592f172da44", "record_id": "flaws_cloudtrail:0000094:078084a1c-7be6-4db5-85be-e592f172da44", "row_index": 94, "timestamp": "2017-03-11T04:45:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "078084a1c-7be6-4db5-85be-e592f172da44", "eventTime": "2017-03-11T04:45:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5T1V6Q1F6TGh3Y1l0M1ZlVjVlYVJoUWVpYW1nejhCSlBDN3R6UHc3cGVGOXEzbFp3T2lHbUhRQWtJbHc1b05QMGdmTTJ6ZXNocFZaL3h2OWIxWjFsN0FZU1R2R2crKy8wUzlGd250N3ZxU014a2hjcko0WEJhcFVEK1V2MVB1bGVNQ0ZQWWNVdDhIaDE2a0VpQ2o3MEV5R3lVM3lIeEVzWFozSzB5bUJvT2syRlJ4cFovbWhVa3BCV3hDdiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b138bb8-3d2f-494d-8a7d-861218479eba", "record_id": "flaws_cloudtrail:0000095:9b138bb8-3d2f-494d-8a7d-861218479eba", "row_index": 95, "timestamp": "2017-03-11T04:45:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b138bb8-3d2f-494d-8a7d-861218479eba", "eventTime": "2017-03-11T04:45:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXb1IwZ051eTl3YlRDNW9wVHpyL3JHRFBQdU4yNm02bHNPOCt0Mlo2UWc4ZXhIdEkvVWs5UjVtc2JhUnlZbzdHUWptQnIzWG5JZVFqcUVZSlY2clUzVlJabCtjUTN0K2w5UTZTcEN5bG4vQ2RxUFArMWRPTWdwV2VTQnBPL1EybE51ZHpiSHVqMU9NQjFIYWRDNE1rM2dJL2NsRkFQaTVsaEZwbVBsN09ybEk2czcyUXRTbW9vMDNiSCtkMCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48b7de62-39bc-48e3-a61d-800dcfa7228d", "record_id": "flaws_cloudtrail:0000096:48b7de62-39bc-48e3-a61d-800dcfa7228d", "row_index": 96, "timestamp": "2017-03-11T04:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48b7de62-39bc-48e3-a61d-800dcfa7228d", "eventTime": "2017-03-11T04:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMeDJkdmJLV2lyT0Vpc1g3UmdWejFrQU54NGczclNUK1JXUXN3N0pYVko5elFzUVFWVzdaY1R3RXNzWDdaRGlRMGxSQTNkVDU5ZW05Sjh4bUtGQUlhdW9FV1VmR05DYlFoV0FsWHRsL1oyZW44bE1FOXpScG5tNkg1cm9tZzNRN29ScVVEdjRQakhzeW1oazNEMDRZbklzamN0bUo2OWMySjJIYStXZFBoQTJmWTZvT0Z4bWs4T1ZuUlE9PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6974b0e-7e9d-4111-8df2-ab13ea432f81", "record_id": "flaws_cloudtrail:0000097:a6974b0e-7e9d-4111-8df2-ab13ea432f81", "row_index": 97, "timestamp": "2017-03-11T04:45:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6974b0e-7e9d-4111-8df2-ab13ea432f81", "eventTime": "2017-03-11T04:45:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPRzdzU1MxaG5XWk8rUmkvcll3aUNGOHhlZ1ZKVmc0Tm5oSDFmVTUyQ0ZlQlU3aXYva2RERkxSYmlOT2thQTZjK05SUGV1TnJEaGp4aUpJRjJQTkZtdkEwUTlIZitoWFJrYVFKUk9vWk5aYjEycVVDeHkrbHh2VlJOcjRUOGRiS2RoNC9tQk16bWtXM2tSOFkxV1JCcVBuRUpqNFpXaWs4bUVSVXRyaUYwbEdoZjc1SGpqZkdQSGwzb0VXZCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a66380c-e250-42db-8311-d1616f9301d6", "record_id": "flaws_cloudtrail:0000098:3a66380c-e250-42db-8311-d1616f9301d6", "row_index": 98, "timestamp": "2017-03-11T04:45:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a66380c-e250-42db-8311-d1616f9301d6", "eventTime": "2017-03-11T04:45:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1RGluaDQrWUcvZ2RLR1FiT1FnelhCWjE0Y3dERkcrSEE0TmVMbTU1N1ZCb2hUaVEwdXVsMHYyU0d5NWtvU25FQkt6M0pzSG9lU1pDRWJrMGNoSWU5MWd6MjlFTm1MOUpxbUtEbG9hL3JYZlplM2tlOHM5TkxiR2I1RGJwcGY3UHhJNkNKYWVLZmhyZ0lxZjlZYVovNWp3T0IrZEhPY1pwNFNFOTAxcTkvcGFCYnFsYU92TFNIelhuaEFRTSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace336cd-77d0-46f1-9c92-9e45d01f7e57", "record_id": "flaws_cloudtrail:0000099:ace336cd-77d0-46f1-9c92-9e45d01f7e57", "row_index": 99, "timestamp": "2017-03-11T04:45:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace336cd-77d0-46f1-9c92-9e45d01f7e57", "eventTime": "2017-03-11T04:45:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0UW9sYTJKQTRuTExONWFZV0RKNGdJQkR6NTJyTjQyajNramZJM3ZxeGJKM21RWjBhd0FUYUovTk5xZ1RDYjByVkN5Y1NBK1BIQmxzeUg1c3RrejRVTEV5VS9OYnE0cEZJQVdxanpHSGxzY1UxSkQrYWJUeWM4QW9xTWxlNml0V0xlY2lFWTNobmRWL0RRaHluQXlKTG5sMjdrMUMyZTlBaWkvL0s4MUVZZFBUWWI5VEtIczE3OWJZODFnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19b1b7b0-b38d-43e2-a88f-5d68ca646a75", "record_id": "flaws_cloudtrail:0000100:19b1b7b0-b38d-43e2-a88f-5d68ca646a75", "row_index": 100, "timestamp": "2017-03-11T04:47:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "193.9.222.3", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19b1b7b0-b38d-43e2-a88f-5d68ca646a75", "eventTime": "2017-03-11T04:47:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "193.9.222.3", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-66-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e829364-3adf-437e-a7aa-3c4c19651030", "record_id": "flaws_cloudtrail:0000101:d0e829364-3adf-437e-a7aa-3c4c19651030", "row_index": 101, "timestamp": "2017-03-11T04:56:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAUU8QRIXAVOEVINFF", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "189.93.253.250", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e829364-3adf-437e-a7aa-3c4c19651030", "eventTime": "2017-03-11T04:56:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "189.93.253.250", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAUU8QRIXAVOEVINFF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T03:10:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2017/03/11/[$LATEST]08e7f3479b648fe5ffdd97b92ae7cf3c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0dd6632-0d95-4141-895b-f7edc9034c09", "record_id": "flaws_cloudtrail:0000102:a0dd6632-0d95-4141-895b-f7edc9034c09", "row_index": 102, "timestamp": "2017-03-11T05:32:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1475, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0dd6632-0d95-4141-895b-f7edc9034c09", "eventTime": "2017-03-11T05:32:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZBWBOS75UYBGWK48", "expiration": "Mar 11, 2017 11:48:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e81e5e1-74d0-4597-8e7f-d9cd7ae4ff23", "record_id": "flaws_cloudtrail:0000103:9e81e5e1-74d0-4597-8e7f-d9cd7ae4ff23", "row_index": 103, "timestamp": "2017-03-11T05:40:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "90.122.62.76", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e81e5e1-74d0-4597-8e7f-d9cd7ae4ff23", "eventTime": "2017-03-11T05:40:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "90.122.62.76", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c1748b-078e-4fac-9fc1-7c73cd2a4be2", "record_id": "flaws_cloudtrail:0000104:13c1748b-078e-4fac-9fc1-7c73cd2a4be2", "row_index": 104, "timestamp": "2017-03-11T05:46:06Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.237.26.88", "user_agent": "[aws-cli/1.10.36 Python/2.7.10 Darwin/16.4.0 botocore/1.4.26]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 642, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c1748b-078e-4fac-9fc1-7c73cd2a4be2", "eventTime": "2017-03-11T05:46:06Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.237.26.88", "userAgent": "[aws-cli/1.10.36 Python/2.7.10 Darwin/16.4.0 botocore/1.4.26]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f9a999-2215-49b7-9e27-e8131bb7ef00", "record_id": "flaws_cloudtrail:0000105:39f9a999-2215-49b7-9e27-e8131bb7ef00", "row_index": 105, "timestamp": "2017-03-11T05:46:30Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.237.26.88", "user_agent": "[aws-cli/1.10.36 Python/2.7.10 Darwin/16.4.0 botocore/1.4.26]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 641, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f9a999-2215-49b7-9e27-e8131bb7ef00", "eventTime": "2017-03-11T05:46:30Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.237.26.88", "userAgent": "[aws-cli/1.10.36 Python/2.7.10 Darwin/16.4.0 botocore/1.4.26]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96c54d0d-0cbe-4b41-a7b6-0ac9d10ba2b1", "record_id": "flaws_cloudtrail:0000106:96c54d0d-0cbe-4b41-a7b6-0ac9d10ba2b1", "row_index": 106, "timestamp": "2017-03-11T05:47:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96c54d0d-0cbe-4b41-a7b6-0ac9d10ba2b1", "eventTime": "2017-03-11T05:47:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7817f952-847d-4097-9789-d1659bb7ee6c", "record_id": "flaws_cloudtrail:0000107:7817f952-847d-4097-9789-d1659bb7ee6c", "row_index": 107, "timestamp": "2017-03-11T05:54:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7817f952-847d-4097-9789-d1659bb7ee6c", "eventTime": "2017-03-11T05:54:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cdbd273-104f-46e6-8625-0bed0eaf2b04", "record_id": "flaws_cloudtrail:0000108:4cdbd273-104f-46e6-8625-0bed0eaf2b04", "row_index": 108, "timestamp": "2017-03-11T06:08:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cdbd273-104f-46e6-8625-0bed0eaf2b04", "eventTime": "2017-03-11T06:08:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77dbe73d-3e4f-454e-bb0f-5654ca9ccfad", "record_id": "flaws_cloudtrail:0000109:77dbe73d-3e4f-454e-bb0f-5654ca9ccfad", "row_index": 109, "timestamp": "2017-03-11T06:21:58Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77dbe73d-3e4f-454e-bb0f-5654ca9ccfad", "eventTime": "2017-03-11T06:21:58Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d6b892-b9b1-4db2-837e-ddf574a41262", "record_id": "flaws_cloudtrail:0000110:a8d6b892-b9b1-4db2-837e-ddf574a41262", "row_index": 110, "timestamp": "2017-03-11T06:30:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d6b892-b9b1-4db2-837e-ddf574a41262", "eventTime": "2017-03-11T06:30:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29274-b84d-4db5-b7d8-bcf838f81631", "record_id": "flaws_cloudtrail:0000111:29274-b84d-4db5-b7d8-bcf838f81631", "row_index": 111, "timestamp": "2017-03-11T06:32:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29274-b84d-4db5-b7d8-bcf838f81631", "eventTime": "2017-03-11T06:32:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0SCTHLLOF4O45CF2", "expiration": "Mar 11, 2017 12:54:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41afb836-684c-42d9-a54b-359d8155297b", "record_id": "flaws_cloudtrail:0000112:41afb836-684c-42d9-a54b-359d8155297b", "row_index": 112, "timestamp": "2017-03-11T06:33:42Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41afb836-684c-42d9-a54b-359d8155297b", "eventTime": "2017-03-11T06:33:42Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "PRODUCT_CODES"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54594ce-f693-4bb0-8c54-75cc14ab880b", "record_id": "flaws_cloudtrail:0000113:54594ce-f693-4bb0-8c54-75cc14ab880b", "row_index": 113, "timestamp": "2017-03-11T06:33:48Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.228.94.1", "user_agent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54594ce-f693-4bb0-8c54-75cc14ab880b", "eventTime": "2017-03-11T06:33:48Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.228.94.1", "userAgent": "aws-cli/1.11.61 Python/2.7.13 Darwin/16.4.0 botocore/1.5.24", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbd14ac1-8582-44ab-bbdf-db75dc76c978", "record_id": "flaws_cloudtrail:0000114:bbd14ac1-8582-44ab-bbdf-db75dc76c978", "row_index": 114, "timestamp": "2017-03-11T07:32:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbd14ac1-8582-44ab-bbdf-db75dc76c978", "eventTime": "2017-03-11T07:32:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALT52VJIMW3TL8CN0", "expiration": "Mar 11, 2017 2:03:54 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064af31c-3287-4cf4-80e6-01c1d74ecd7a", "record_id": "flaws_cloudtrail:0000115:064af31c-3287-4cf4-80e6-01c1d74ecd7a", "row_index": 115, "timestamp": "2017-03-11T08:32:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064af31c-3287-4cf4-80e6-01c1d74ecd7a", "eventTime": "2017-03-11T08:32:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHS14ZWEMHVF5SZ2S", "expiration": "Mar 11, 2017 2:40:41 PM", "sessionToken": "FQoDYXdzEHIaDAH8QiUuc1ZYcacpVSK3A4/VsqQ3saNG3nllTpYcE6RnJkExjnibOVeVeAigYuTcP2SR8vBvg7jFBYcimCb0vHMWTj6Kce0DZblzW5rWNfhG+P9b8ntHVAf9iKBVYxaokz7DRMeFKIRdkfaeqjbgHs2NYemF0KDEErLnISh7fI9BFxR2wCnCbvfC7LhnxUPOXpqWerVMmWTTwgmzhBf4zvmSzoZ52GsZk0qBlesJgZ+Ra/+N08LkEZeTs+mENv8zLi5HOPo/7uQTYp5ZcHPOJgzxuy5Ll/uykPZNGhi0bsfHPRAVi7PIEdOp95QXcbT8AfZHTFPqBi7QFhQIy1PLNcgOD+TRTXkxIj54HdbhFjBDqUT/NB3Jtstu/JGiu3KBWsai5d4RBq1okGHsyMKR+snvfnbouTcYw1xSQTEwh9MaoiP2WreGTZ3U2QzxtW+S4f2B0nXRuKVXjRGIhoMmd6OQWDV+pK0jG+JQl2UWroIOf8qeYn5okDXNglQJbA5mbgMxxMm3AVuBHZg9v5hgjt9xC7qBUHvFPsLH75fkBZRVm9RCGS9CeTQTQYMqxE4jW8Ufc8FYeGOYM+zGU9t/TIq8eqFcbIoos+yOxgU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1980de8-7808-406b-ab38-5eeead07baa3", "record_id": "flaws_cloudtrail:0000116:f1980de8-7808-406b-ab38-5eeead07baa3", "row_index": 116, "timestamp": "2017-03-11T08:36:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1980de8-7808-406b-ab38-5eeead07baa3", "eventTime": "2017-03-11T08:36:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0215c67c-4274-483e-9acb-81f94dade7be", "record_id": "flaws_cloudtrail:0000117:0215c67c-4274-483e-9acb-81f94dade7be", "row_index": 117, "timestamp": "2017-03-11T08:46:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0215c67c-4274-483e-9acb-81f94dade7be", "eventTime": "2017-03-11T08:46:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56ecd0cb-ea4d-4bf3-afc9-f00d448abb45", "record_id": "flaws_cloudtrail:0000118:56ecd0cb-ea4d-4bf3-afc9-f00d448abb45", "row_index": 118, "timestamp": "2017-03-11T08:46:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56ecd0cb-ea4d-4bf3-afc9-f00d448abb45", "eventTime": "2017-03-11T08:46:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDMjNuWDZUbzF5V2RXekptVkJBK00zQXRNSEdkNHJtdkFSeUdzL0h3bGFJOFdjNTY2UlovWTNKaUlDaGNQQXFTZFZLOXZudjk1R25hTk9qU00wVm1EVXB4ak5IQjQ0a1dlMjJMbURLN1BtNWdtVHpmN3BDd1hCUHJNbnZxUHZPZUxXNFdKRUtVamRSVU16enQ0Q0lkVXVPNGZmakVBUjAxMmZGYnBlOUNteGU4RmFKWWhqUDUzL1BqanhvdSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9e8406d-e9e8-4a0e-b3b1-69df82d2ea74", "record_id": "flaws_cloudtrail:0000119:e9e8406d-e9e8-4a0e-b3b1-69df82d2ea74", "row_index": 119, "timestamp": "2017-03-11T08:46:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9e8406d-e9e8-4a0e-b3b1-69df82d2ea74", "eventTime": "2017-03-11T08:46:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrQk9GRFZ1ZUdQeVdCNWljYTErcllIRGxZZVl5WHF6Q2hqSElsdk5NQUhoaWxJNndmK3d1bGZ5VkxFNmF6bWRRZWJvT1VucXFOTEEyeStXQzBFbjFpQlE4UkpldlRwMHlYM3VQNHZKbUZ0ZFR3Z3ArVjJCdzVHOHZHbzA5Z1hYZlIyd2NDakUwU2R3dDV3VE9KcjlPaVlHbWU2T3MwdWlPQWh3dDZMQlUycTJkUHVFRVZRWnBpYnYvRDJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a3f45ae-f0b5-4ce9-8d5a-2ecb0bbf8300", "record_id": "flaws_cloudtrail:0000120:4a3f45ae-f0b5-4ce9-8d5a-2ecb0bbf8300", "row_index": 120, "timestamp": "2017-03-11T08:46:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a3f45ae-f0b5-4ce9-8d5a-2ecb0bbf8300", "eventTime": "2017-03-11T08:46:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1TUwxZ0Q3ZTgxNGhQUnlnUE0xUkhKcnpYZVI5aGpwSDdGdWx4ZEg1QUVtUk10a1FsY1lycTBqT1pTVi9Pb3FzbExoOHlhMkJDb25jVlFLZmdjQVVWZFkyVzRudE03ZCtyVWJxVkNNdWJJUDJHVmJuSW41T0V6dzlQOC9iMjFFRjhESnVzUU5acEg3clR4TWoyK0d4cTMxTjFEb2NSZlVlcXErUXJjTmt0bGlmUFF6UDRaekFPTzNzQmVPWiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d03f23d-643a-4f2a-bec3-9f3883dd301e", "record_id": "flaws_cloudtrail:0000121:8d03f23d-643a-4f2a-bec3-9f3883dd301e", "row_index": 121, "timestamp": "2017-03-11T08:46:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d03f23d-643a-4f2a-bec3-9f3883dd301e", "eventTime": "2017-03-11T08:46:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxRzZwRHdzSExndnpJSWtvM3ZXSjdiVUNHK3didVNWVDBESFd2Q0o0MDV5Z0ZRV1RJditLWVFKQ0FmZXhldUlTNldyYm53VEh0elZkMkN6eTZBek94OC9YZklEQ1hhOTBkcUFnWGs2aWY3b2Z5ZHhsT3V1V2JMWkJ4ZDEwbkIxVVAxemxJV1dpdXkzRERJSEtjc1ZqU0pGQnovcHR5bmJBVDNJYUN2WHVOQ0tqdmRSNlI4cm9XNUJraU5RPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9f65a2-4f4e-403c-b1d4-827440e64cd88", "record_id": "flaws_cloudtrail:0000122:0f9f65a2-4f4e-403c-b1d4-827440e64cd88", "row_index": 122, "timestamp": "2017-03-11T08:46:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9f65a2-4f4e-403c-b1d4-827440e64cd88", "eventTime": "2017-03-11T08:46:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpVDl4amlFRTlSNmdxd0VsRUJobGRsdWxDdmJJNnVaRmZMaHI5Z2QxVitYQkZxRUJuTXp1Rk8vL3lqOEZaWjU5UUthSGpTTk5RTk1tRkRnbE1obXRQQml6VjM1RjBCY3h6L29VL2VDRWVOdEx0R3hsN2llYnczeXRoUWxkeXFGOU1MWUhCcStSOU5Ib1JnOG1MR0FaT0theFNNa3lMZmFscTVGVzlEMi8xV1UvSHFYck1JYmhRRTVXcmwzZiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b76d980d-a70c-4304-aa1b-58e96dc99820", "record_id": "flaws_cloudtrail:0000123:b76d980d-a70c-4304-aa1b-58e96dc99820", "row_index": 123, "timestamp": "2017-03-11T08:46:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b76d980d-a70c-4304-aa1b-58e96dc99820", "eventTime": "2017-03-11T08:46:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBSjhVYWFYMGxuVXFWbDNMOUJqeDNrMmZ2eHVZREdiUGRIZzNESGZaVnlIQkZ5ZTJ6eG1IdkJlU3A3UVZDVEM0YTM5b202d1d6SnNyc2tQQThNeGNPTkJXV0Z2dUNSbHIxSnROd3RZYUtscG9teHBwREszaW5HOVhSWWdLVkowK1E3YnR6STFDR1pQV2tEK0lMeGJ3dmk4SFQxb3gvY3FOWmtjbHNBdFRTQlE1MnV4VUY0aURiK3FyaHdBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6348b552-2538-4375-9617-c73d62f3d35b", "record_id": "flaws_cloudtrail:0000124:6348b552-2538-4375-9617-c73d62f3d35b", "row_index": 124, "timestamp": "2017-03-11T08:46:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6348b552-2538-4375-9617-c73d62f3d35b", "eventTime": "2017-03-11T08:46:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtWUtzTFBnWTlEc2tKb3MrampGSXJaTEVqVnprMjFUSTFLVWp0b3lUU3BrVnhTdEtSWEpXSFd2U2xvNGIyTVkrL25hZ29vRTFFQXFnMjJoWG9rdnVwdGNhVGRsaFIzMjVpK29oZlJaQkkrRnQrRG5tUlNNRXErRjJXL0NreEJsMXlRdmlhZ21jWXltK29qT25IMk5aZm9zY1NDZm5pMDd6N2dsSlh5enM0bXgxbmNNeUdXNUpwSDZBNGo4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4017a631-8b89-43cc-bc91-1aa1d79a18d3", "record_id": "flaws_cloudtrail:0000125:4017a631-8b89-43cc-bc91-1aa1d79a18d3", "row_index": 125, "timestamp": "2017-03-11T08:47:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4017a631-8b89-43cc-bc91-1aa1d79a18d3", "eventTime": "2017-03-11T08:47:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13fa2494-a50b-4158-aad1-805950bcc3", "record_id": "flaws_cloudtrail:0000126:13fa2494-a50b-4158-aad1-805950bcc3", "row_index": 126, "timestamp": "2017-03-11T08:48:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13fa2494-a50b-4158-aad1-805950bcc3", "eventTime": "2017-03-11T08:48:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d987d2b3-b4f0-4c8b-a220-b1a887bdef7e", "record_id": "flaws_cloudtrail:0000127:d987d2b3-b4f0-4c8b-a220-b1a887bdef7e", "row_index": 127, "timestamp": "2017-03-11T08:52:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d987d2b3-b4f0-4c8b-a220-b1a887bdef7e", "eventTime": "2017-03-11T08:52:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af479cbe-08ba-49a2-aa96-78698a266dc7", "record_id": "flaws_cloudtrail:0000128:af479cbe-08ba-49a2-aa96-78698a266dc7", "row_index": 128, "timestamp": "2017-03-11T08:52:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af479cbe-08ba-49a2-aa96-78698a266dc7", "eventTime": "2017-03-11T08:52:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoTHQxMlRtczI3Wkh0RkUrUVc1S0NwdkRsZERyVmpYbWQzdVQ4UXpyaUdpeGsxMi9jMTZOQmU0MHZ2WXNoeG9qb0pkN21qSmw5eW9UNElmS0xEdlFQeTdMeit1TjZUdXNiNzBYQmJRRGdwcGtLb3l3Uk1CUEVUYW5yd2g0Sm9vWWRTcnl1S0s2TnFhSk11YkkrbGFWbzBkKytnWkxhWHVyQnBYMytVelVoNG9XV3JQSkhTNjRpSjU0ZGpreSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22eeb59c-9449-47cc-98d4-aefb425d5a0a", "record_id": "flaws_cloudtrail:0000129:22eeb59c-9449-47cc-98d4-aefb425d5a0a", "row_index": 129, "timestamp": "2017-03-11T08:52:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22eeb59c-9449-47cc-98d4-aefb425d5a0a", "eventTime": "2017-03-11T08:52:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqN0tUeGFTZ0xtWFoyVGRlMDNUbkhNSmwyV0krU0p3WnpHV3gzYVZ1a0dMTTR0cVE5SHgwR0VoakQrYXlWZHJaYmFtWHlPeXlDM3NWWTFhU1pDSlAwMHNCRHdqVjhjekQrVXRrZ2lWbEFvVzNoN0VRazc2YXMxQnY5WUpYRWxscnFwZERyRmtZZWpVT3loam9iWnNobXZ6c3BNeHArYjU1Vmg1Snp1ZHVKYU5VcWhIcXZHWXVnOUpBM2NRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d53d1b09-8bf2-4e63-9cf4-a44f1a66f64a", "record_id": "flaws_cloudtrail:0000130:d53d1b09-8bf2-4e63-9cf4-a44f1a66f64a", "row_index": 130, "timestamp": "2017-03-11T08:52:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d53d1b09-8bf2-4e63-9cf4-a44f1a66f64a", "eventTime": "2017-03-11T08:52:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDd1p4MFlQZ01FeU9laEJpQVp0R0xpYWZBV0NSWWNDeTZXWWw1UG1xWWdkb3NyUUZjbTY5VlFDRlo3YTB0MGRhSEoyQ0FhcWc5dUUrRXlhQXZGZ2hBK3lyc1FhM3VHWlVrZXRIa0pxbzBmQlpGM2h2ZGphNExDdlJyaEpYakQ5SS9YdEJSbzU2MkhyMmluVkEwQVZFY3VKK0VaalYvTDJJdXFVT25melA3TEEvZnZQVXNxMkNJVzNlNkRRaCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afdd3f26-da03-43f6-90a0-fc1bde4af2bc", "record_id": "flaws_cloudtrail:0000131:afdd3f26-da03-43f6-90a0-fc1bde4af2bc", "row_index": 131, "timestamp": "2017-03-11T08:52:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afdd3f26-da03-43f6-90a0-fc1bde4af2bc", "eventTime": "2017-03-11T08:52:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyeHJmeGwxM21iYzN2cjhZQU5iNDNqUDJFNlJ5c3drOFI4dURiUERkald2V29aaDU5WDBjcUhGL09DSkY1TEpWa2FYK1RZampmdGo1VDhmNmhXSnhZME9yY0JCVm9KUnI0TitkTEE3VnhoT0lwaDVvd0RYUXJHc0J3U0d0OWNQenB3NHd0azVoVEV3OW5Zc2RnV0hka1Jrd2dIVDhHTlNJMDRhNHlEcE9qaW1YbHk0aUltNFRFMnFoYUxRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f8104be-df60-4435-bd9d-4afc62edfb75", "record_id": "flaws_cloudtrail:0000132:3f8104be-df60-4435-bd9d-4afc62edfb75", "row_index": 132, "timestamp": "2017-03-11T08:52:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f8104be-df60-4435-bd9d-4afc62edfb75", "eventTime": "2017-03-11T08:52:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWNXUzUUc0NXYwWXh0U3hFcU55MU9LaWJBbG5pdG9PcDhZUU1IV2lEU2xVSXp6ZFVMRU9JSDJJdFVBZUVobE12ZWxuaVZLZHJ6QkZVOC9tR0E3ZjVQbEgvcExleDd2d3RMMmZ3QjJneHlnRURjd0c1U1VSaTk3b1VoVUdaZWU4Tks3ZUFTVG9BQXQ1U3dldzMvWUo0RldDRytVa1QyZzBHbFN6dWtlSVRCdUpXSUhReVMrSHdIaE8yRUhhUSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e196347-f66f-448b-a537-553bf78fd5ec", "record_id": "flaws_cloudtrail:0000133:e196347-f66f-448b-a537-553bf78fd5ec", "row_index": 133, "timestamp": "2017-03-11T08:52:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e196347-f66f-448b-a537-553bf78fd5ec", "eventTime": "2017-03-11T08:52:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhd0JUZHpDbnlkemFIaWxNQlJqVXpEQVBkeFFPemRRQktUdHUxZmlPaUJjdFkwL2lyUkd6QlNLbGs1ekF4Q1V5U3lHNWFOSmpKcVlDdG1MU1J3MEdtNGFCQlh4MHZLV3lGODN2OC93OUlZUkZVNXVZOFd3STJadi8rZHFxcEhYTFBDc2VQQThTV1ptZDBSRlB0cnZoSHU2dFM1dUtFNFdmME5IZ2pXVG1XMWJyVGhaaUtZckdhZGkvQ0ZzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ed2dfc4-3224-46d8-b962-3d5f40318", "record_id": "flaws_cloudtrail:0000134:6ed2dfc4-3224-46d8-b962-3d5f40318", "row_index": 134, "timestamp": "2017-03-11T08:52:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ed2dfc4-3224-46d8-b962-3d5f40318", "eventTime": "2017-03-11T08:52:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoalpoZlFqWEdxaGFBMTJzRnBqQmFFM2hYeE1lQ2pBWnJPMFUrdC9EWlpkUXZiRDhZN2VzNHhPOCtQVG93dVk5b1RXSXNNcEpsM054R3hzeHNiRTF1YTJvVXJwcHdzYkZUbis1bjZlTnNLVUI1TUZCVG5CeTFESTNTVGxjT3QxZ0lZR2Z5V0lDWVg2UnAwaUY2cmNYdUk4cGYwbm5yNnB5SkdFNzRjRFZ6RFRBeXlxQ1F5VFI0WUNjVXN3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5646dd7-3f22-4329-9fe3-22dc8ee708588", "record_id": "flaws_cloudtrail:0000135:f5646dd7-3f22-4329-9fe3-22dc8ee708588", "row_index": 135, "timestamp": "2017-03-11T08:54:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5646dd7-3f22-4329-9fe3-22dc8ee708588", "eventTime": "2017-03-11T08:54:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba4d58b-3a7d-4e99-8355-835591b6be0e1", "record_id": "flaws_cloudtrail:0000136:7ba4d58b-3a7d-4e99-8355-835591b6be0e1", "row_index": 136, "timestamp": "2017-03-11T08:55:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba4d58b-3a7d-4e99-8355-835591b6be0e1", "eventTime": "2017-03-11T08:55:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38514a-86fd-4240-b291-7961a58c86c6", "record_id": "flaws_cloudtrail:0000137:b38514a-86fd-4240-b291-7961a58c86c6", "row_index": 137, "timestamp": "2017-03-11T09:11:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38514a-86fd-4240-b291-7961a58c86c6", "eventTime": "2017-03-11T09:11:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf35589-1520-4b04-8ee7-a66d597a82f6", "record_id": "flaws_cloudtrail:0000138:fbf35589-1520-4b04-8ee7-a66d597a82f6", "row_index": 138, "timestamp": "2017-03-11T09:22:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf35589-1520-4b04-8ee7-a66d597a82f6", "eventTime": "2017-03-11T09:22:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d34e278-8217-4ce3-ba1b-aafa47d4835a", "record_id": "flaws_cloudtrail:0000139:7d34e278-8217-4ce3-ba1b-aafa47d4835a", "row_index": 139, "timestamp": "2017-03-11T09:26:16Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAJ60D3ONF5RRBHUD8", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "252.182.3.208", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d34e278-8217-4ce3-ba1b-aafa47d4835a", "eventTime": "2017-03-11T09:26:16Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.182.3.208", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAJ60D3ONF5RRBHUD8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T09:26:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2017/03/11/[$LATEST]ff57a9e1fe144fba0baeff8e691c6ac9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20dbc343-d170-4b08-98bd-79382b9c8468", "record_id": "flaws_cloudtrail:0000140:20dbc343-d170-4b08-98bd-79382b9c8468", "row_index": 140, "timestamp": "2017-03-11T09:26:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1214, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20dbc343-d170-4b08-98bd-79382b9c8468", "eventTime": "2017-03-11T09:26:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ60D3ONF5RRBHUD8", "expiration": "Mar 11, 2017 9:26:16 PM", "sessionToken": "FQoDYXdzEHMaDOmFIqFuwIeXOKuw1iLfAYRQ0+yWKI7tqpM7BQqFWzP2sbwo+sWLZ5uFPjv6shoa5pMpBpl9GKtBIwzLDU/iWfsFx7SKjVInJsZrCLb7Bh+N3fTe7tlXkV+LXtr+kSXoAzXB1N5/zZxuS8IQ9L50V6V6hiL12wLe8YN3tKCJj9d+GKmQyVPYhkymXrbm1j90SrMdy/KTBj3rWueCot61bY29kJDqhsNEbRzzKBiNVIDN49fHTncBNrMhZs1kYMau0CH0r+YbFLWTzS/hnzIs9xG487WVODWvlEcUnAasipBBc/f3SVoNNF64Zrk0KqEouIWPxgU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e07482-d0cf-4567-8e89-497a7570a3a0", "record_id": "flaws_cloudtrail:0000141:9e07482-d0cf-4567-8e89-497a7570a3a0", "row_index": 141, "timestamp": "2017-03-11T09:26:47Z", "event_type": "ScanProvisionedProducts", "event_source": "servicecatalog.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e07482-d0cf-4567-8e89-497a7570a3a0", "eventTime": "2017-03-11T09:26:47Z", "eventName": "ScanProvisionedProducts", "eventSource": "servicecatalog.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: servicecatalog:ScanProvisionedProducts on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aedaf80-f190-40f4-9324-e6b36291fa2", "record_id": "flaws_cloudtrail:0000142:2aedaf80-f190-40f4-9324-e6b36291fa2", "row_index": 142, "timestamp": "2017-03-11T09:28:34Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aedaf80-f190-40f4-9324-e6b36291fa2", "eventTime": "2017-03-11T09:28:34Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec5d60b-35c5-4a21-88f1-c362aa44a52a", "record_id": "flaws_cloudtrail:0000143:8ec5d60b-35c5-4a21-88f1-c362aa44a52a", "row_index": 143, "timestamp": "2017-03-11T09:29:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec5d60b-35c5-4a21-88f1-c362aa44a52a", "eventTime": "2017-03-11T09:29:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f013e72f-13c9-46bf-9d81-ed1ee8f49eb3", "record_id": "flaws_cloudtrail:0000144:f013e72f-13c9-46bf-9d81-ed1ee8f49eb3", "row_index": 144, "timestamp": "2017-03-11T09:31:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f013e72f-13c9-46bf-9d81-ed1ee8f49eb3", "eventTime": "2017-03-11T09:31:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79cfb8ac-8b97-46ae-8902-412c229d8866", "record_id": "flaws_cloudtrail:0000145:79cfb8ac-8b97-46ae-8902-412c229d8866", "row_index": 145, "timestamp": "2017-03-11T09:31:36Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79cfb8ac-8b97-46ae-8902-412c229d8866", "eventTime": "2017-03-11T09:31:36Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc10d594-b89e-4832-b59c-47ee91268375", "record_id": "flaws_cloudtrail:0000146:cc10d594-b89e-4832-b59c-47ee91268375", "row_index": 146, "timestamp": "2017-03-11T09:32:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc10d594-b89e-4832-b59c-47ee91268375", "eventTime": "2017-03-11T09:32:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO4ZW2NLSS933DK77", "expiration": "Mar 11, 2017 3:43:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7c502b-26d2-4b0c-baa5-db272a3afe51", "record_id": "flaws_cloudtrail:0000147:8a7c502b-26d2-4b0c-baa5-db272a3afe51", "row_index": 147, "timestamp": "2017-03-11T09:35:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7c502b-26d2-4b0c-baa5-db272a3afe51", "eventTime": "2017-03-11T09:35:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26ac96f8-d07c-4d1f-a1f8-06a9665d00d0", "record_id": "flaws_cloudtrail:0000148:26ac96f8-d07c-4d1f-a1f8-06a9665d00d0", "row_index": 148, "timestamp": "2017-03-11T09:35:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26ac96f8-d07c-4d1f-a1f8-06a9665d00d0", "eventTime": "2017-03-11T09:35:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ebb0c71-0dab-4b8e-aef2-f01bd2ebf756", "record_id": "flaws_cloudtrail:0000149:7ebb0c71-0dab-4b8e-aef2-f01bd2ebf756", "row_index": 149, "timestamp": "2017-03-11T09:36:42Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ebb0c71-0dab-4b8e-aef2-f01bd2ebf756", "eventTime": "2017-03-11T09:36:42Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f908f734-af56-4dbd-8a7d-f387c5e8f119", "record_id": "flaws_cloudtrail:0000150:f908f734-af56-4dbd-8a7d-f387c5e8f119", "row_index": 150, "timestamp": "2017-03-11T09:36:54Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f908f734-af56-4dbd-8a7d-f387c5e8f119", "eventTime": "2017-03-11T09:36:54Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f302167e2-dc59-43f0-b6bf-2fb0275d8a0a", "record_id": "flaws_cloudtrail:0000151:f302167e2-dc59-43f0-b6bf-2fb0275d8a0a", "row_index": 151, "timestamp": "2017-03-11T09:38:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f302167e2-dc59-43f0-b6bf-2fb0275d8a0a", "eventTime": "2017-03-11T09:38:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3cfde97-c55b-464c-b6f8-7c7ff12a0b9e", "record_id": "flaws_cloudtrail:0000152:a3cfde97-c55b-464c-b6f8-7c7ff12a0b9e", "row_index": 152, "timestamp": "2017-03-11T09:39:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3cfde97-c55b-464c-b6f8-7c7ff12a0b9e", "eventTime": "2017-03-11T09:39:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1d0473-a0b6-4a67-8214-43ecf9df3df6", "record_id": "flaws_cloudtrail:0000153:2d1d0473-a0b6-4a67-8214-43ecf9df3df6", "row_index": 153, "timestamp": "2017-03-11T09:39:48Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1d0473-a0b6-4a67-8214-43ecf9df3df6", "eventTime": "2017-03-11T09:39:48Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061299ed-414b-47b3-ab98-90b20cbb7e2a", "record_id": "flaws_cloudtrail:0000154:061299ed-414b-47b3-ab98-90b20cbb7e2a", "row_index": 154, "timestamp": "2017-03-11T09:43:16Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "226.253.1.255", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061299ed-414b-47b3-ab98-90b20cbb7e2a", "eventTime": "2017-03-11T09:43:16Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.253.1.255", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.10.1-520793-generic botocore/1.4.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc3e3a51-fddb-4df0-8854-b3897d9330cf", "record_id": "flaws_cloudtrail:0000155:dc3e3a51-fddb-4df0-8854-b3897d9330cf", "row_index": 155, "timestamp": "2017-03-11T10:13:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-85"], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc3e3a51-fddb-4df0-8854-b3897d9330cf", "eventTime": "2017-03-11T10:13:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-85", "roleSessionName": "reader-8882"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-85"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a235084-3677-4109-980d-8aa5079a9632", "record_id": "flaws_cloudtrail:0000156:9a235084-3677-4109-980d-8aa5079a9632", "row_index": 156, "timestamp": "2017-03-11T10:14:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 527, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a235084-3677-4109-980d-8aa5079a9632", "eventTime": "2017-03-11T10:14:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409aaee6-55ff-42e0-9cc0-00ea1065c2c7", "record_id": "flaws_cloudtrail:0000157:409aaee6-55ff-42e0-9cc0-00ea1065c2c7", "row_index": 157, "timestamp": "2017-03-11T10:15:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409aaee6-55ff-42e0-9cc0-00ea1065c2c7", "eventTime": "2017-03-11T10:15:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93b59906-ebe9-4fa9-8d9a-68522fd9eeb5", "record_id": "flaws_cloudtrail:0000158:93b59906-ebe9-4fa9-8d9a-68522fd9eeb5", "row_index": 158, "timestamp": "2017-03-11T10:16:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092-archive"], "raw_record_size_bytes": 648, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93b59906-ebe9-4fa9-8d9a-68522fd9eeb5", "eventTime": "2017-03-11T10:16:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216a8f4f-e4a3-4144-a6e1-cf2e5425a6a3", "record_id": "flaws_cloudtrail:0000159:216a8f4f-e4a3-4144-a6e1-cf2e5425a6a3", "row_index": 159, "timestamp": "2017-03-11T10:18:20Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 652, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216a8f4f-e4a3-4144-a6e1-cf2e5425a6a3", "eventTime": "2017-03-11T10:18:20Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca91dddf-1ded-4308-a339-cca39af0a6e2", "record_id": "flaws_cloudtrail:0000160:ca91dddf-1ded-4308-a339-cca39af0a6e2", "row_index": 160, "timestamp": "2017-03-11T10:20:30Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca91dddf-1ded-4308-a339-cca39af0a6e2", "eventTime": "2017-03-11T10:20:30Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092", "key": "customer/06461.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85a81f91-387b-4b3e-8fcf-eb70a8a76c79", "record_id": "flaws_cloudtrail:0000161:85a81f91-387b-4b3e-8fcf-eb70a8a76c79", "row_index": 161, "timestamp": "2017-03-11T10:21:17Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85a81f91-387b-4b3e-8fcf-eb70a8a76c79", "eventTime": "2017-03-11T10:21:17Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092", "key": "customer/00054.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f1b4535-7dc0-457f-ae8e-069338f7a9a7", "record_id": "flaws_cloudtrail:0000162:4f1b4535-7dc0-457f-ae8e-069338f7a9a7", "row_index": 162, "timestamp": "2017-03-11T10:22:11Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f1b4535-7dc0-457f-ae8e-069338f7a9a7", "eventTime": "2017-03-11T10:22:11Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092", "key": "customer/02951.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742ff1c3-53cd-4b0e-b15c-9bdbfcdcc66b", "record_id": "flaws_cloudtrail:0000163:742ff1c3-53cd-4b0e-b15c-9bdbfcdcc66b", "row_index": 163, "timestamp": "2017-03-11T10:22:28Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742ff1c3-53cd-4b0e-b15c-9bdbfcdcc66b", "eventTime": "2017-03-11T10:22:28Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092", "key": "customer/06950.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816d91d6-57eb-4d0a-95a9-47a53bbea03a", "record_id": "flaws_cloudtrail:0000164:816d91d6-57eb-4d0a-95a9-47a53bbea03a", "row_index": 164, "timestamp": "2017-03-11T10:23:10Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA5IAN4Q0KJO93G9CR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.22.86.161", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5092"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816d91d6-57eb-4d0a-95a9-47a53bbea03a", "eventTime": "2017-03-11T10:23:10Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.22.86.161", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA5IAN4Q0KJO93G9CR", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5092", "key": "customer/05013.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5092"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e2e2059-8025-4047-96c6-5a50aa340ae0", "record_id": "flaws_cloudtrail:0000165:1e2e2059-8025-4047-96c6-5a50aa340ae0", "row_index": 165, "timestamp": "2017-03-11T10:32:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e2e2059-8025-4047-96c6-5a50aa340ae0", "eventTime": "2017-03-11T10:32:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIFB7EZ4Z6MMY2XRF", "expiration": "Mar 11, 2017 4:44:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d80c93c9-6352-48b0-aeb6-985269d279", "record_id": "flaws_cloudtrail:0000166:d80c93c9-6352-48b0-aeb6-985269d279", "row_index": 166, "timestamp": "2017-03-11T11:32:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d80c93c9-6352-48b0-aeb6-985269d279", "eventTime": "2017-03-11T11:32:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUVX9K7S89329O2TS", "expiration": "Mar 11, 2017 5:40:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b2a02a-50dd-4922-9640-94061e97e", "record_id": "flaws_cloudtrail:0000167:79b2a02a-50dd-4922-9640-94061e97e", "row_index": 167, "timestamp": "2017-03-11T12:32:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1475, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b2a02a-50dd-4922-9640-94061e97e", "eventTime": "2017-03-11T12:32:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9Z9Q965HA6JYBMNO", "expiration": "Mar 11, 2017 6:40:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "981c0277-9577-4f76-8359-4b997c7622a9", "record_id": "flaws_cloudtrail:0000168:981c0277-9577-4f76-8359-4b997c7622a9", "row_index": 168, "timestamp": "2017-03-11T13:09:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.5.204.17", "user_agent": "[aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 635, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "981c0277-9577-4f76-8359-4b997c7622a9", "eventTime": "2017-03-11T13:09:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.5.204.17", "userAgent": "[aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc02a38b-578e-4161-8ec3-d27e9f9c67d9", "record_id": "flaws_cloudtrail:0000169:fc02a38b-578e-4161-8ec3-d27e9f9c67d9", "row_index": 169, "timestamp": "2017-03-11T13:10:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.5.204.17", "user_agent": "aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc02a38b-578e-4161-8ec3-d27e9f9c67d9", "eventTime": "2017-03-11T13:10:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.5.204.17", "userAgent": "aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3c11b01-1ddb-43d5-ac49-8afe10c80989", "record_id": "flaws_cloudtrail:0000170:d3c11b01-1ddb-43d5-ac49-8afe10c80989", "row_index": 170, "timestamp": "2017-03-11T13:11:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.5.204.17", "user_agent": "aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3c11b01-1ddb-43d5-ac49-8afe10c80989", "eventTime": "2017-03-11T13:11:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.5.204.17", "userAgent": "aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c836d127-8172-43c8-923b-6bb6e9b04c83", "record_id": "flaws_cloudtrail:0000171:c836d127-8172-43c8-923b-6bb6e9b04c83", "row_index": 171, "timestamp": "2017-03-11T13:12:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.5.204.17", "user_agent": "aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c836d127-8172-43c8-923b-6bb6e9b04c83", "eventTime": "2017-03-11T13:12:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.5.204.17", "userAgent": "aws-cli/1.10.33 Python/2.7.9 Windows/7 botocore/1.4.23", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e433e1f-2595-4ebd-9265-6fe85cb19e60", "record_id": "flaws_cloudtrail:0000172:9e433e1f-2595-4ebd-9265-6fe85cb19e60", "row_index": 172, "timestamp": "2017-03-11T13:32:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e433e1f-2595-4ebd-9265-6fe85cb19e60", "eventTime": "2017-03-11T13:32:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG1L7BY5AAKI1E4RI", "expiration": "Mar 11, 2017 7:49:56 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e289070-93f7-412c-bb89-e216711f2ca", "record_id": "flaws_cloudtrail:0000173:4e289070-93f7-412c-bb89-e216711f2ca", "row_index": 173, "timestamp": "2017-03-11T14:03:40Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e289070-93f7-412c-bb89-e216711f2ca", "eventTime": "2017-03-11T14:03:40Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42226-3789-4057-a647-cdbec7e440d2", "record_id": "flaws_cloudtrail:0000174:42226-3789-4057-a647-cdbec7e440d2", "row_index": 174, "timestamp": "2017-03-11T14:14:21Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42226-3789-4057-a647-cdbec7e440d2", "eventTime": "2017-03-11T14:14:21Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68561d2-0f55-4f39-9b6e-b112ddef7596", "record_id": "flaws_cloudtrail:0000175:68561d2-0f55-4f39-9b6e-b112ddef7596", "row_index": 175, "timestamp": "2017-03-11T14:15:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68561d2-0f55-4f39-9b6e-b112ddef7596", "eventTime": "2017-03-11T14:15:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "092ad4b4-dd7a-4b3c-b259-43d20b459488", "record_id": "flaws_cloudtrail:0000176:092ad4b4-dd7a-4b3c-b259-43d20b459488", "row_index": 176, "timestamp": "2017-03-11T14:15:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "092ad4b4-dd7a-4b3c-b259-43d20b459488", "eventTime": "2017-03-11T14:15:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47d8ac88-2436-4c72-adca-1879ad102e1a", "record_id": "flaws_cloudtrail:0000177:47d8ac88-2436-4c72-adca-1879ad102e1a", "row_index": 177, "timestamp": "2017-03-11T14:15:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47d8ac88-2436-4c72-adca-1879ad102e1a", "eventTime": "2017-03-11T14:15:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d64187-1dfc-475b-8105-4891bf8032c2", "record_id": "flaws_cloudtrail:0000178:a0d64187-1dfc-475b-8105-4891bf8032c2", "row_index": 178, "timestamp": "2017-03-11T14:32:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d64187-1dfc-475b-8105-4891bf8032c2", "eventTime": "2017-03-11T14:32:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW9TOQXEXXZZ1EJPE", "expiration": "Mar 11, 2017 9:08:32 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d927de9-f0e6-44ec-a4db-390a3468793e", "record_id": "flaws_cloudtrail:0000179:5d927de9-f0e6-44ec-a4db-390a3468793e", "row_index": 179, "timestamp": "2017-03-11T15:05:23Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "202.250.60.132", "user_agent": "[aws-cli/1.10.0 Python/2.7.10 Darwin/15.3.0 botocore/1.3.22]", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 602, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d927de9-f0e6-44ec-a4db-390a3468793e", "eventTime": "2017-03-11T15:05:23Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "202.250.60.132", "userAgent": "[aws-cli/1.10.0 Python/2.7.10 Darwin/15.3.0 botocore/1.3.22]", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b9705ee-49e4-477b-8b30-49dd31e80e2d", "record_id": "flaws_cloudtrail:0000180:1b9705ee-49e4-477b-8b30-49dd31e80e2d", "row_index": 180, "timestamp": "2017-03-11T15:08:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "202.250.60.132", "user_agent": "aws-cli/1.10.0 Python/2.7.10 Darwin/15.3.0 botocore/1.3.22", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b9705ee-49e4-477b-8b30-49dd31e80e2d", "eventTime": "2017-03-11T15:08:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "202.250.60.132", "userAgent": "aws-cli/1.10.0 Python/2.7.10 Darwin/15.3.0 botocore/1.3.22", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8e0c3cc-7334-4135-9505-ba0dc9fe3f15", "record_id": "flaws_cloudtrail:0000181:c8e0c3cc-7334-4135-9505-ba0dc9fe3f15", "row_index": 181, "timestamp": "2017-03-11T15:08:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "202.250.60.132", "user_agent": "aws-cli/1.10.0 Python/2.7.10 Darwin/15.3.0 botocore/1.3.22", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8e0c3cc-7334-4135-9505-ba0dc9fe3f15", "eventTime": "2017-03-11T15:08:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "202.250.60.132", "userAgent": "aws-cli/1.10.0 Python/2.7.10 Darwin/15.3.0 botocore/1.3.22", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b1969a-d7b6-4877-8c68-acdee7f550657", "record_id": "flaws_cloudtrail:0000182:18b1969a-d7b6-4877-8c68-acdee7f550657", "row_index": 182, "timestamp": "2017-03-11T15:23:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 619, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b1969a-d7b6-4877-8c68-acdee7f550657", "eventTime": "2017-03-11T15:23:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342a7309-3abf-47d3-a162-5d03d074568", "record_id": "flaws_cloudtrail:0000183:342a7309-3abf-47d3-a162-5d03d074568", "row_index": 183, "timestamp": "2017-03-11T15:27:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342a7309-3abf-47d3-a162-5d03d074568", "eventTime": "2017-03-11T15:27:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade85744-e3ee-4f27-9862-24790ac5c05", "record_id": "flaws_cloudtrail:0000184:ade85744-e3ee-4f27-9862-24790ac5c05", "row_index": 184, "timestamp": "2017-03-11T15:28:11Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade85744-e3ee-4f27-9862-24790ac5c05", "eventTime": "2017-03-11T15:28:11Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55a90fc3-2a02-439d-8cf0-1010ca763215", "record_id": "flaws_cloudtrail:0000185:55a90fc3-2a02-439d-8cf0-1010ca763215", "row_index": 185, "timestamp": "2017-03-11T15:28:51Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55a90fc3-2a02-439d-8cf0-1010ca763215", "eventTime": "2017-03-11T15:28:51Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d593b8-5433-4967-a750-abeab75cc4bb", "record_id": "flaws_cloudtrail:0000186:57d593b8-5433-4967-a750-abeab75cc4bb", "row_index": 186, "timestamp": "2017-03-11T15:28:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d593b8-5433-4967-a750-abeab75cc4bb", "eventTime": "2017-03-11T15:28:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46eb4258-0cc9-4065-be3a-8cc6e8d16328", "record_id": "flaws_cloudtrail:0000187:46eb4258-0cc9-4065-be3a-8cc6e8d16328", "row_index": 187, "timestamp": "2017-03-11T15:29:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46eb4258-0cc9-4065-be3a-8cc6e8d16328", "eventTime": "2017-03-11T15:29:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTU0ErcnFzSmRYbVh4blFDTjJqOWRRK0VyWXVvRm1SZFQrQjUrV3VSVTRYaHRVSytmRW45OXk3N3kvS21WZUhYQlBXNzVXOGQyYVY2anRPMjRLcTRDUUtTUEdCTm1lVm1vTFBWd3NmKytMdUphY1ZjT1k4cHBmSDdyKzRkZzFVaUsvYWl6d1Q0d0hMMWtsWWpUSnNrT1p4SGhNM24yanh6M2FzZEt3eEpSeFdReG1qMGwxeHg3b01TYU1XcSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7a826924-8812-44bc-a881-62322debca", "record_id": "flaws_cloudtrail:0000188:c7a826924-8812-44bc-a881-62322debca", "row_index": 188, "timestamp": "2017-03-11T15:29:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7a826924-8812-44bc-a881-62322debca", "eventTime": "2017-03-11T15:29:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1OFpGRGt1ZWMvbDRCVWxkdXBzZkU2OTlNdmtwa2d0TzFlSW5LN1ducU9Lbk5VSXFBSnIycHhFYStwQlh5RFR4YlhEcThXdTA5ZUZYU0F4L2NOcTNvemJMSFozekM1ZTlMdmFOZzlRWno4MGc2YktERHhuYXAwM0JmYUlBam5HajVQQkpmRFhKMkkwRTJ3c3U5Q0lMSlhaRXJ6NnY2T2tPbGxVSmxZVkZGNC9uaFJLdHk5Y29QTE54NU1vPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45202c48-770c-4e22-bab4-48301c7802c3", "record_id": "flaws_cloudtrail:0000189:45202c48-770c-4e22-bab4-48301c7802c3", "row_index": 189, "timestamp": "2017-03-11T15:29:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45202c48-770c-4e22-bab4-48301c7802c3", "eventTime": "2017-03-11T15:29:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzNktOTW9DRThoZ3FqWjlGK29UTUMyeUtHaWUyTTY1YkR5d2R6TzhiRjZNSkRKYVk1emU1c2N4ZFFHd25IWGtoc0djNWV2YzlLNm4rSVBxYzZ6NmVMOFQxSjB4SE9JQUxoL2wrd1ErVS9OemdtdnV3aytGWjV2WS9JWGFuOWhaZ2J1Nk5jZU96OFlNemRKYmNTOWQwOU5qbnFuMmJPZDJ6R20zTHRKRVk3ZkpTTzdId2JwTUVXNjBuUjkyZSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae7d055b-9c10-4539-84ad-a050f21e2913", "record_id": "flaws_cloudtrail:0000190:ae7d055b-9c10-4539-84ad-a050f21e2913", "row_index": 190, "timestamp": "2017-03-11T15:29:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae7d055b-9c10-4539-84ad-a050f21e2913", "eventTime": "2017-03-11T15:29:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYNVN3eXVrS0FMWkFxd2MyR3F2cTJPZW9hZVovVHNlS2NYOG8xVFZvOUJzUG52NlFOYVZ2SU5hZmJjOFRvbmdHczV5MVNSV1U5QTc5bW9oOUxpdW5PTzAzd3hia1Y4ZUlWOXFzM2gwY2VsdGs2eGhDemRpRnVlbnM4bzRrZ1dNYmxiUkx0eGZ6cnFCN3JNWm5TSERnVVE4ZTZKV3ZjNXJtOGc2RHRKM2h1d2piaXdHMW5UU2QwOCtYQ29BPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3a835037-3f83-4c62-be93-555f2db601244", "record_id": "flaws_cloudtrail:0000191:a3a835037-3f83-4c62-be93-555f2db601244", "row_index": 191, "timestamp": "2017-03-11T15:29:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3a835037-3f83-4c62-be93-555f2db601244", "eventTime": "2017-03-11T15:29:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0aGxpdExqTGJkNCtEeGtCT3lvR3hJczlVenppd2grVXlETDVBa0E1blNlZEhqSDhNNWpBUHBWVlAwdkdrdDJGaUEvR1M3L0hrYldBMlA2dzhoeENyOUdiUk93T1ZLRnpGa0VSNDN4SHVSaW9VR29pTko4YVkyMVl3SU02bUE4bXhoM0hOZmRmQ2J2YU9xNTBCV3YzM0ZjOHVVVUdHWTVCVmZ5ZWg5aERvVG91eWtQd3EzZDV4cVZjU1NLOSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd290814-ba3b-4681-b6ec-59cae0dcc1d1", "record_id": "flaws_cloudtrail:0000192:9bd290814-ba3b-4681-b6ec-59cae0dcc1d1", "row_index": 192, "timestamp": "2017-03-11T15:29:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd290814-ba3b-4681-b6ec-59cae0dcc1d1", "eventTime": "2017-03-11T15:29:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyTmhycXIzNzE4YTNDY2ZKYUJDVDNYNlgyWGR0RERlR3F3VStpeG1hem5sOENYWGFNRVFEUHdONmU4Y00xZTJWOUVXRktFUVJNTzRpYjhKTWJLNEIzSWdkWm45UFJoVVR4Y0dkbzArWnk2cktaaVJpZlBjUW9VbDYzM0h1VUdWS25BSk0vaC9ROHZBdmhoeFBzbU1TQU85ZjQ3Z1htWk1MM2FxRjdiaERsNkZFRGJOZzU3b1JJdFdYQUdrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81529b25-5bd4-4ade-a90f-2e116f4266ec", "record_id": "flaws_cloudtrail:0000193:81529b25-5bd4-4ade-a90f-2e116f4266ec", "row_index": 193, "timestamp": "2017-03-11T15:29:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81529b25-5bd4-4ade-a90f-2e116f4266ec", "eventTime": "2017-03-11T15:29:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKbldLUXJGSnM4MTVNZnFtMnhFdGUvRlJQeXNzcWhiNnc5STVrazNkc29zcCtJWVNhRlZyeHoyM0g4MVhoR0UzdmNCV243YmNiNVQ0SzUyQU04RnV5R2tQMzB4U2k4YXZjK3A2WGpJamtzT3dIczR1NkdESVNrMDJ4NGpDY0x2U0NQbWx6a3daSWxrY0JDM0pLQ1kyc05uOUttbkdkdW53TTFjaFc0S3lURGlnRXlqN0dPZTBnTXhvaENjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "910681-ce8e-46d0-9363-5c1a622d4289", "record_id": "flaws_cloudtrail:0000194:910681-ce8e-46d0-9363-5c1a622d4289", "row_index": 194, "timestamp": "2017-03-11T15:32:54Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "910681-ce8e-46d0-9363-5c1a622d4289", "eventTime": "2017-03-11T15:32:54Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb0a25e1-b3b8-4437-9746-39f5211f8f88", "record_id": "flaws_cloudtrail:0000195:bb0a25e1-b3b8-4437-9746-39f5211f8f88", "row_index": 195, "timestamp": "2017-03-11T15:32:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb0a25e1-b3b8-4437-9746-39f5211f8f88", "eventTime": "2017-03-11T15:32:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVG2KSB47J88K80ZO", "expiration": "Mar 11, 2017 10:04:33 PM", "sessionToken": "FQoDYXdzEHkaDJ+dYWYXylkOda7J1SK3A+iP0RZdc0mc6p7VvAnS1F0ihD0h50iuqWJiA0ILjGPcEYe38k2r06Vv+ykbIjex3om5PLlFiiVRUtHCaF10WeIJgRppo3247s+vhYZAA4Jld++WuDd2L9HQBHqn5crjcyB1CqB8EJQBjIZiWQHOXNYs8KNtd+LsvNtoTi+WVgESRSJDv3gpSD/a7nm/x/LEE05AY9mRwGa7J3cTks8ztt/HNWTBYP6ZIABB7bfolWna/b0aL3tr/WZ3EXHCffrxUTwG05zgxQZDXOuLboNnKKwYBKZV/EfYTez81IfoiFLydLTvbAtWnB8eusmIHEoabnxJ8TzY0D6MOzzm7t1Gtd4wpZpsC6FU2j3H0n5eiU+sgS8Es4eGRqYOZ7+t3MuQOOXfuLYlWQRGGCATB8gJoXnNYX0Zt41dp42LqCJPB7MqtWKBXWmuPGxGHiis9RF6et1DJPPtKe+GJUmyDHbOZ2KmM/xoPpvHY2QgEFKV5wu8FvWccPhV8eg5NIy8V4da7lI3jNUrjMcD52yojeGMjuQHeMgkhCZRLwumonxh/pYM9UVchw8WXl/PIyS5bpG6hQrLUG/7t8coqbGQxgU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44e778a3-92f6-4534-a790-189637f71", "record_id": "flaws_cloudtrail:0000196:44e778a3-92f6-4534-a790-189637f71", "row_index": 196, "timestamp": "2017-03-11T15:33:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44e778a3-92f6-4534-a790-189637f71", "eventTime": "2017-03-11T15:33:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ddcaf20-d105-4a78-9116-a05e5227f422", "record_id": "flaws_cloudtrail:0000197:5ddcaf20-d105-4a78-9116-a05e5227f422", "row_index": 197, "timestamp": "2017-03-11T15:35:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ddcaf20-d105-4a78-9116-a05e5227f422", "eventTime": "2017-03-11T15:35:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e058fdfe-8d32-4dbe-95f8-396ed5c751223", "record_id": "flaws_cloudtrail:0000198:e058fdfe-8d32-4dbe-95f8-396ed5c751223", "row_index": 198, "timestamp": "2017-03-11T15:36:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e058fdfe-8d32-4dbe-95f8-396ed5c751223", "eventTime": "2017-03-11T15:36:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71aea221-4e52-4595-beab-d17f23f40cc3", "record_id": "flaws_cloudtrail:0000199:71aea221-4e52-4595-beab-d17f23f40cc3", "row_index": 199, "timestamp": "2017-03-11T15:37:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71aea221-4e52-4595-beab-d17f23f40cc3", "eventTime": "2017-03-11T15:37:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a776472-2b5f-4c4b-ae2a-9953c6ecbfc7", "record_id": "flaws_cloudtrail:0000200:a776472-2b5f-4c4b-ae2a-9953c6ecbfc7", "row_index": 200, "timestamp": "2017-03-11T15:38:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a776472-2b5f-4c4b-ae2a-9953c6ecbfc7", "eventTime": "2017-03-11T15:38:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54ba07b1-355c-4e9e-838e-a0c4b86be222", "record_id": "flaws_cloudtrail:0000201:54ba07b1-355c-4e9e-838e-a0c4b86be222", "row_index": 201, "timestamp": "2017-03-11T15:41:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 618, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54ba07b1-355c-4e9e-838e-a0c4b86be222", "eventTime": "2017-03-11T15:41:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b4b9cf1-f570-4034-9622-4e8a49b95076", "record_id": "flaws_cloudtrail:0000202:2b4b9cf1-f570-4034-9622-4e8a49b95076", "row_index": 202, "timestamp": "2017-03-11T15:42:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b4b9cf1-f570-4034-9622-4e8a49b95076", "eventTime": "2017-03-11T15:42:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The unspecified location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "a-test-flaws-bucket"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a34776-ae28-41ef-8938-23b29d985367f", "record_id": "flaws_cloudtrail:0000203:b7a34776-ae28-41ef-8938-23b29d985367f", "row_index": 203, "timestamp": "2017-03-11T15:42:49Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a34776-ae28-41ef-8938-23b29d985367f", "eventTime": "2017-03-11T15:42:49Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The unspecified location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"bucketName": "a-test-flaws-bucket"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fd4208f-2dec-4044-9b94-0c1bf3cc5f30", "record_id": "flaws_cloudtrail:0000204:3fd4208f-2dec-4044-9b94-0c1bf3cc5f30", "row_index": 204, "timestamp": "2017-03-11T15:43:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fd4208f-2dec-4044-9b94-0c1bf3cc5f30", "eventTime": "2017-03-11T15:43:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "userName": "backup"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "a-test-flaws-bucket"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7c2e4f0-602c-4058-93d7-5cf6b622ca21", "record_id": "flaws_cloudtrail:0000205:e7c2e4f0-602c-4058-93d7-5cf6b622ca21", "row_index": 205, "timestamp": "2017-03-11T15:43:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7c2e4f0-602c-4058-93d7-5cf6b622ca21", "eventTime": "2017-03-11T15:43:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5750f669-0f3d-41c8-8b10-19cba973b0b5", "record_id": "flaws_cloudtrail:0000206:5750f669-0f3d-41c8-8b10-19cba973b0b5", "row_index": 206, "timestamp": "2017-03-11T15:46:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5750f669-0f3d-41c8-8b10-19cba973b0b5", "eventTime": "2017-03-11T15:46:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd8c0d6d-5a10-4cc9-8963-c45716dc3e3", "record_id": "flaws_cloudtrail:0000207:fd8c0d6d-5a10-4cc9-8963-c45716dc3e3", "row_index": 207, "timestamp": "2017-03-11T15:48:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd8c0d6d-5a10-4cc9-8963-c45716dc3e3", "eventTime": "2017-03-11T15:48:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a927746-6563-4d36-ae9e-58f0451f6126", "record_id": "flaws_cloudtrail:0000208:6a927746-6563-4d36-ae9e-58f0451f6126", "row_index": 208, "timestamp": "2017-03-11T15:48:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a927746-6563-4d36-ae9e-58f0451f6126", "eventTime": "2017-03-11T15:48:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb68a7ca-030b-42d7-a769-0770d6fe8fad", "record_id": "flaws_cloudtrail:0000209:bb68a7ca-030b-42d7-a769-0770d6fe8fad", "row_index": 209, "timestamp": "2017-03-11T15:48:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "[aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 621, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb68a7ca-030b-42d7-a769-0770d6fe8fad", "eventTime": "2017-03-11T15:48:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "[aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2a29fcd-1463-40d1-8fec-f21e5200ac3a", "record_id": "flaws_cloudtrail:0000210:a2a29fcd-1463-40d1-8fec-f21e5200ac3a", "row_index": 210, "timestamp": "2017-03-11T15:51:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2a29fcd-1463-40d1-8fec-f21e5200ac3a", "eventTime": "2017-03-11T15:51:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7345c6f6-60be-4807-8ef3-bd79a526024", "record_id": "flaws_cloudtrail:0000211:7345c6f6-60be-4807-8ef3-bd79a526024", "row_index": 211, "timestamp": "2017-03-11T15:52:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7345c6f6-60be-4807-8ef3-bd79a526024", "eventTime": "2017-03-11T15:52:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01675b00-73bf-4f11-90c4-354788f81ed", "record_id": "flaws_cloudtrail:0000212:01675b00-73bf-4f11-90c4-354788f81ed", "row_index": 212, "timestamp": "2017-03-11T15:52:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01675b00-73bf-4f11-90c4-354788f81ed", "eventTime": "2017-03-11T15:52:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1dfc681-2ce4-414b-b815-956952ce0662", "record_id": "flaws_cloudtrail:0000213:c1dfc681-2ce4-414b-b815-956952ce0662", "row_index": 213, "timestamp": "2017-03-11T15:53:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1dfc681-2ce4-414b-b815-956952ce0662", "eventTime": "2017-03-11T15:53:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf19035-f4d4-4436-a5d9-64ad8dfcaa96", "record_id": "flaws_cloudtrail:0000214:bf19035-f4d4-4436-a5d9-64ad8dfcaa96", "row_index": 214, "timestamp": "2017-03-11T15:54:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf19035-f4d4-4436-a5d9-64ad8dfcaa96", "eventTime": "2017-03-11T15:54:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d062620c-a418-429b-8f82-f234eff6f8cf", "record_id": "flaws_cloudtrail:0000215:d062620c-a418-429b-8f82-f234eff6f8cf", "row_index": 215, "timestamp": "2017-03-11T15:54:59Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d062620c-a418-429b-8f82-f234eff6f8cf", "eventTime": "2017-03-11T15:54:59Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "835344e8f-29be-4226-adb8-7c7aceb12a5c", "record_id": "flaws_cloudtrail:0000216:835344e8f-29be-4226-adb8-7c7aceb12a5c", "row_index": 216, "timestamp": "2017-03-11T15:55:18Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "835344e8f-29be-4226-adb8-7c7aceb12a5c", "eventTime": "2017-03-11T15:55:18Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86d73c44-d89f-46e0-bacc-03c6518822b3", "record_id": "flaws_cloudtrail:0000217:86d73c44-d89f-46e0-bacc-03c6518822b3", "row_index": 217, "timestamp": "2017-03-11T15:55:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86d73c44-d89f-46e0-bacc-03c6518822b3", "eventTime": "2017-03-11T15:55:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b573133-25b3-4d8d-9a6a-f3caecdeffb4", "record_id": "flaws_cloudtrail:0000218:6b573133-25b3-4d8d-9a6a-f3caecdeffb4", "row_index": 218, "timestamp": "2017-03-11T15:55:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b573133-25b3-4d8d-9a6a-f3caecdeffb4", "eventTime": "2017-03-11T15:55:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b1d2e83-c6f8-41c4-bd6c-512533d31920", "record_id": "flaws_cloudtrail:0000219:8b1d2e83-c6f8-41c4-bd6c-512533d31920", "row_index": 219, "timestamp": "2017-03-11T16:02:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b1d2e83-c6f8-41c4-bd6c-512533d31920", "eventTime": "2017-03-11T16:02:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9da54e06-2dea-41b0-8140-d66217da42", "record_id": "flaws_cloudtrail:0000220:9da54e06-2dea-41b0-8140-d66217da42", "row_index": 220, "timestamp": "2017-03-11T16:04:51Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9da54e06-2dea-41b0-8140-d66217da42", "eventTime": "2017-03-11T16:04:51Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b660b36-4ec1-46e4-bbd8-39a975a1701e", "record_id": "flaws_cloudtrail:0000221:1b660b36-4ec1-46e4-bbd8-39a975a1701e", "row_index": 221, "timestamp": "2017-03-11T16:05:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b660b36-4ec1-46e4-bbd8-39a975a1701e", "eventTime": "2017-03-11T16:05:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47748ce0-0e12-420f-b284-78a932a7da06", "record_id": "flaws_cloudtrail:0000222:47748ce0-0e12-420f-b284-78a932a7da06", "row_index": 222, "timestamp": "2017-03-11T16:05:32Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47748ce0-0e12-420f-b284-78a932a7da06", "eventTime": "2017-03-11T16:05:32Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1839cdc8-82f1-41d6-b0ab-f4f8e5bd153c", "record_id": "flaws_cloudtrail:0000223:1839cdc8-82f1-41d6-b0ab-f4f8e5bd153c", "row_index": 223, "timestamp": "2017-03-11T16:05:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1839cdc8-82f1-41d6-b0ab-f4f8e5bd153c", "eventTime": "2017-03-11T16:05:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db76c903-9b0e-4e54-bd0c-13c4f89a145b", "record_id": "flaws_cloudtrail:0000224:db76c903-9b0e-4e54-bd0c-13c4f89a145b", "row_index": 224, "timestamp": "2017-03-11T16:05:46Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db76c903-9b0e-4e54-bd0c-13c4f89a145b", "eventTime": "2017-03-11T16:05:46Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a1f35b7-df39-4837-8583-a283a2ff8f38", "record_id": "flaws_cloudtrail:0000225:5a1f35b7-df39-4837-8583-a283a2ff8f38", "row_index": 225, "timestamp": "2017-03-11T16:06:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a1f35b7-df39-4837-8583-a283a2ff8f38", "eventTime": "2017-03-11T16:06:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e420b5-300c-4550-ab74-2731cea3ddc5", "record_id": "flaws_cloudtrail:0000226:e1e420b5-300c-4550-ab74-2731cea3ddc5", "row_index": 226, "timestamp": "2017-03-11T16:07:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e420b5-300c-4550-ab74-2731cea3ddc5", "eventTime": "2017-03-11T16:07:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "213207-e053-4084-b4c1-c18e1f674a15", "record_id": "flaws_cloudtrail:0000227:213207-e053-4084-b4c1-c18e1f674a15", "row_index": 227, "timestamp": "2017-03-11T16:08:24Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "213207-e053-4084-b4c1-c18e1f674a15", "eventTime": "2017-03-11T16:08:24Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53:ListHostedZones", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d1dd16d-2343-4390-8fec-2430e3259252", "record_id": "flaws_cloudtrail:0000228:1d1dd16d-2343-4390-8fec-2430e3259252", "row_index": 228, "timestamp": "2017-03-11T16:08:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d1dd16d-2343-4390-8fec-2430e3259252", "eventTime": "2017-03-11T16:08:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d9cd8d-67b0-4bbe-bb45-5934ac590629a", "record_id": "flaws_cloudtrail:0000229:e5d9cd8d-67b0-4bbe-bb45-5934ac590629a", "row_index": 229, "timestamp": "2017-03-11T16:09:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d9cd8d-67b0-4bbe-bb45-5934ac590629a", "eventTime": "2017-03-11T16:09:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b63926-e568-41cb-ad76-22d0fe11f83c", "record_id": "flaws_cloudtrail:0000230:5b63926-e568-41cb-ad76-22d0fe11f83c", "row_index": 230, "timestamp": "2017-03-11T16:09:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b63926-e568-41cb-ad76-22d0fe11f83c", "eventTime": "2017-03-11T16:09:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64054e-b089-444a-87cc-039d95fbb3e1", "record_id": "flaws_cloudtrail:0000231:64054e-b089-444a-87cc-039d95fbb3e1", "row_index": 231, "timestamp": "2017-03-11T16:09:53Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64054e-b089-444a-87cc-039d95fbb3e1", "eventTime": "2017-03-11T16:09:53Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f6a742-b5a4-4e0f-908a-94a484adf9c2", "record_id": "flaws_cloudtrail:0000232:c4f6a742-b5a4-4e0f-908a-94a484adf9c2", "row_index": 232, "timestamp": "2017-03-11T16:12:30Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f6a742-b5a4-4e0f-908a-94a484adf9c2", "eventTime": "2017-03-11T16:12:30Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce80628-0a8a-4888-bac1-97739d21a309", "record_id": "flaws_cloudtrail:0000233:ce80628-0a8a-4888-bac1-97739d21a309", "row_index": 233, "timestamp": "2017-03-11T16:12:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "[aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce80628-0a8a-4888-bac1-97739d21a309", "eventTime": "2017-03-11T16:12:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "[aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c580b81-fb24-4a4e-ad8f-397b87b58f09", "record_id": "flaws_cloudtrail:0000234:6c580b81-fb24-4a4e-ad8f-397b87b58f09", "row_index": 234, "timestamp": "2017-03-11T16:14:02Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c580b81-fb24-4a4e-ad8f-397b87b58f09", "eventTime": "2017-03-11T16:14:02Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bdc750a-a60c-496d-a755-1d0dd3288fdd", "record_id": "flaws_cloudtrail:0000235:9bdc750a-a60c-496d-a755-1d0dd3288fdd", "row_index": 235, "timestamp": "2017-03-11T16:14:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bdc750a-a60c-496d-a755-1d0dd3288fdd", "eventTime": "2017-03-11T16:14:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f395995a9-c05b-4e59-b193-0d636aeb74a5", "record_id": "flaws_cloudtrail:0000236:f395995a9-c05b-4e59-b193-0d636aeb74a5", "row_index": 236, "timestamp": "2017-03-11T16:14:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f395995a9-c05b-4e59-b193-0d636aeb74a5", "eventTime": "2017-03-11T16:14:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccfc0882-c004-443b-92cb-b5fa287f266e", "record_id": "flaws_cloudtrail:0000237:ccfc0882-c004-443b-92cb-b5fa287f266e", "row_index": 237, "timestamp": "2017-03-11T16:15:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccfc0882-c004-443b-92cb-b5fa287f266e", "eventTime": "2017-03-11T16:15:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31a02c6c-afa5-4150-84ec-6cac316ccb3f", "record_id": "flaws_cloudtrail:0000238:31a02c6c-afa5-4150-84ec-6cac316ccb3f", "row_index": 238, "timestamp": "2017-03-11T16:15:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31a02c6c-afa5-4150-84ec-6cac316ccb3f", "eventTime": "2017-03-11T16:15:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19f9c57-bc7d-4e2c-a3bc-a1da5805be2d", "record_id": "flaws_cloudtrail:0000239:f19f9c57-bc7d-4e2c-a3bc-a1da5805be2d", "row_index": 239, "timestamp": "2017-03-11T16:16:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19f9c57-bc7d-4e2c-a3bc-a1da5805be2d", "eventTime": "2017-03-11T16:16:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c21950c-e37c-4625-be52-319401e6d9", "record_id": "flaws_cloudtrail:0000240:3c21950c-e37c-4625-be52-319401e6d9", "row_index": 240, "timestamp": "2017-03-11T16:16:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c21950c-e37c-4625-be52-319401e6d9", "eventTime": "2017-03-11T16:16:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db63d6f-a2f9-4eb9-bd1e-0121c4da0cfe", "record_id": "flaws_cloudtrail:0000241:5db63d6f-a2f9-4eb9-bd1e-0121c4da0cfe", "row_index": 241, "timestamp": "2017-03-11T16:17:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db63d6f-a2f9-4eb9-bd1e-0121c4da0cfe", "eventTime": "2017-03-11T16:17:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c88df645-9c77-4c58-84b0-39f3c15f77a7", "record_id": "flaws_cloudtrail:0000242:c88df645-9c77-4c58-84b0-39f3c15f77a7", "row_index": 242, "timestamp": "2017-03-11T16:17:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c88df645-9c77-4c58-84b0-39f3c15f77a7", "eventTime": "2017-03-11T16:17:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c190e2a3-15e2-4893-bf23-53ee12f961051", "record_id": "flaws_cloudtrail:0000243:c190e2a3-15e2-4893-bf23-53ee12f961051", "row_index": 243, "timestamp": "2017-03-11T16:18:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c190e2a3-15e2-4893-bf23-53ee12f961051", "eventTime": "2017-03-11T16:18:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bf88f0a-ff8a-429d-8061-0b3b1ea5af21", "record_id": "flaws_cloudtrail:0000244:0bf88f0a-ff8a-429d-8061-0b3b1ea5af21", "row_index": 244, "timestamp": "2017-03-11T16:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bf88f0a-ff8a-429d-8061-0b3b1ea5af21", "eventTime": "2017-03-11T16:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43972a-a0a5-4c80-8ff9-ba86412fc771", "record_id": "flaws_cloudtrail:0000245:43972a-a0a5-4c80-8ff9-ba86412fc771", "row_index": 245, "timestamp": "2017-03-11T16:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43972a-a0a5-4c80-8ff9-ba86412fc771", "eventTime": "2017-03-11T16:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a95b7de-f68e-4a6c-87e6-f5b3c8ffeb92", "record_id": "flaws_cloudtrail:0000246:3a95b7de-f68e-4a6c-87e6-f5b3c8ffeb92", "row_index": 246, "timestamp": "2017-03-11T16:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a95b7de-f68e-4a6c-87e6-f5b3c8ffeb92", "eventTime": "2017-03-11T16:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80662c14-db08-4848-a820-ad7e8594c3a7", "record_id": "flaws_cloudtrail:0000247:80662c14-db08-4848-a820-ad7e8594c3a7", "row_index": 247, "timestamp": "2017-03-11T16:21:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80662c14-db08-4848-a820-ad7e8594c3a7", "eventTime": "2017-03-11T16:21:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9207ce2-c9cf-44a8-a283-53a1a4ec3c4a", "record_id": "flaws_cloudtrail:0000248:a9207ce2-c9cf-44a8-a283-53a1a4ec3c4a", "row_index": 248, "timestamp": "2017-03-11T16:22:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9207ce2-c9cf-44a8-a283-53a1a4ec3c4a", "eventTime": "2017-03-11T16:22:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41919-55fd-4eca-907b-bbead7edcf4e", "record_id": "flaws_cloudtrail:0000249:41919-55fd-4eca-907b-bbead7edcf4e", "row_index": 249, "timestamp": "2017-03-11T16:25:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41919-55fd-4eca-907b-bbead7edcf4e", "eventTime": "2017-03-11T16:25:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2fecc07-a702-4f7a-b4ea-6ab5778f9630", "record_id": "flaws_cloudtrail:0000250:b2fecc07-a702-4f7a-b4ea-6ab5778f9630", "row_index": 250, "timestamp": "2017-03-11T16:30:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVG2KSB47J88K80ZO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2fecc07-a702-4f7a-b4ea-6ab5778f9630", "eventTime": "2017-03-11T16:30:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVG2KSB47J88K80ZO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T15:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e5a7231-3318-4810-a6f3-383628cbb7ed", "record_id": "flaws_cloudtrail:0000251:9e5a7231-3318-4810-a6f3-383628cbb7ed", "row_index": 251, "timestamp": "2017-03-11T16:30:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVG2KSB47J88K80ZO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e5a7231-3318-4810-a6f3-383628cbb7ed", "eventTime": "2017-03-11T16:30:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVG2KSB47J88K80ZO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T15:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fcabf1e-073f-4ce9-bd5c-5893e2ec0ccb", "record_id": "flaws_cloudtrail:0000252:4fcabf1e-073f-4ce9-bd5c-5893e2ec0ccb", "row_index": 252, "timestamp": "2017-03-11T16:32:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fcabf1e-073f-4ce9-bd5c-5893e2ec0ccb", "eventTime": "2017-03-11T16:32:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAX6W5YFJQIDRJYZIA", "expiration": "Mar 11, 2017 11:05:07 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd099e78-8a84-4038-9da5-820955fd", "record_id": "flaws_cloudtrail:0000253:fd099e78-8a84-4038-9da5-820955fd", "row_index": 253, "timestamp": "2017-03-11T16:35:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVG2KSB47J88K80ZO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd099e78-8a84-4038-9da5-820955fd", "eventTime": "2017-03-11T16:35:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVG2KSB47J88K80ZO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T15:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0776c69f-4347-43f1-a212-64897a3b0b57", "record_id": "flaws_cloudtrail:0000254:0776c69f-4347-43f1-a212-64897a3b0b57", "row_index": 254, "timestamp": "2017-03-11T16:41:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0776c69f-4347-43f1-a212-64897a3b0b57", "eventTime": "2017-03-11T16:41:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab115d23-d4f6-494f-b1e6-56c89f3cb2a4", "record_id": "flaws_cloudtrail:0000255:ab115d23-d4f6-494f-b1e6-56c89f3cb2a4", "row_index": 255, "timestamp": "2017-03-11T16:42:52Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab115d23-d4f6-494f-b1e6-56c89f3cb2a4", "eventTime": "2017-03-11T16:42:52Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAccountAliases", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "414210f-699c-448f-abce-fc332996a6a2", "record_id": "flaws_cloudtrail:0000256:414210f-699c-448f-abce-fc332996a6a2", "row_index": 256, "timestamp": "2017-03-11T16:43:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "414210f-699c-448f-abce-fc332996a6a2", "eventTime": "2017-03-11T16:43:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db78e323-5550-4fef-9aa4-3f909804baa0", "record_id": "flaws_cloudtrail:0000257:db78e323-5550-4fef-9aa4-3f909804baa0", "row_index": 257, "timestamp": "2017-03-11T16:45:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "137.27.206.238", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db78e323-5550-4fef-9aa4-3f909804baa0", "eventTime": "2017-03-11T16:45:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "137.27.206.238", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/3.4.0+", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe106eb8-dbd4-449a-8c54-eba104faa123", "record_id": "flaws_cloudtrail:0000258:fe106eb8-dbd4-449a-8c54-eba104faa123", "row_index": 258, "timestamp": "2017-03-11T16:50:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAX6W5YFJQIDRJYZIA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe106eb8-dbd4-449a-8c54-eba104faa123", "eventTime": "2017-03-11T16:50:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAX6W5YFJQIDRJYZIA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T16:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "563e4756-31c8-499b-9512-f3578bc0ef6b", "record_id": "flaws_cloudtrail:0000259:563e4756-31c8-499b-9512-f3578bc0ef6b", "row_index": 259, "timestamp": "2017-03-11T16:55:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "563e4756-31c8-499b-9512-f3578bc0ef6b", "eventTime": "2017-03-11T16:55:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0026b33-cb1c-4beb-9f50-1983a1c5871d", "record_id": "flaws_cloudtrail:0000260:e0026b33-cb1c-4beb-9f50-1983a1c5871d", "row_index": 260, "timestamp": "2017-03-11T16:56:11Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0026b33-cb1c-4beb-9f50-1983a1c5871d", "eventTime": "2017-03-11T16:56:11Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39ddb59e-8cd4-437c-af05-29c027bc1cf2", "record_id": "flaws_cloudtrail:0000261:39ddb59e-8cd4-437c-af05-29c027bc1cf2", "row_index": 261, "timestamp": "2017-03-11T16:57:00Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39ddb59e-8cd4-437c-af05-29c027bc1cf2", "eventTime": "2017-03-11T16:57:00Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84494-872f-4bf5-a4f2-7b08b6ab54e1", "record_id": "flaws_cloudtrail:0000262:84494-872f-4bf5-a4f2-7b08b6ab54e1", "row_index": 262, "timestamp": "2017-03-11T16:57:11Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84494-872f-4bf5-a4f2-7b08b6ab54e1", "eventTime": "2017-03-11T16:57:11Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133f38d1-9fdd-474b-94c9-6da3a74e2115", "record_id": "flaws_cloudtrail:0000263:133f38d1-9fdd-474b-94c9-6da3a74e2115", "row_index": 263, "timestamp": "2017-03-11T16:57:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133f38d1-9fdd-474b-94c9-6da3a74e2115", "eventTime": "2017-03-11T16:57:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c443161-45ce-44c2-8cea-2712dcd4018a", "record_id": "flaws_cloudtrail:0000264:2c443161-45ce-44c2-8cea-2712dcd4018a", "row_index": 264, "timestamp": "2017-03-11T16:58:36Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c443161-45ce-44c2-8cea-2712dcd4018a", "eventTime": "2017-03-11T16:58:36Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efc062711-ec14-44b9-b6d3-4f9be2c1e981", "record_id": "flaws_cloudtrail:0000265:efc062711-ec14-44b9-b6d3-4f9be2c1e981", "row_index": 265, "timestamp": "2017-03-11T16:58:44Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efc062711-ec14-44b9-b6d3-4f9be2c1e981", "eventTime": "2017-03-11T16:58:44Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61c93b10-d859-41a2-bcd8-5a91f59e6fb7", "record_id": "flaws_cloudtrail:0000266:61c93b10-d859-41a2-bcd8-5a91f59e6fb7", "row_index": 266, "timestamp": "2017-03-11T16:59:10Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61c93b10-d859-41a2-bcd8-5a91f59e6fb7", "eventTime": "2017-03-11T16:59:10Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f40447-fa14-4799-9c06-614c9939ee61", "record_id": "flaws_cloudtrail:0000267:1f40447-fa14-4799-9c06-614c9939ee61", "row_index": 267, "timestamp": "2017-03-11T16:59:21Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f40447-fa14-4799-9c06-614c9939ee61", "eventTime": "2017-03-11T16:59:21Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c84169a-4bbc-4dca-9ba9-7a8ff67e0a15", "record_id": "flaws_cloudtrail:0000268:c84169a-4bbc-4dca-9ba9-7a8ff67e0a15", "row_index": 268, "timestamp": "2017-03-11T16:59:40Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c84169a-4bbc-4dca-9ba9-7a8ff67e0a15", "eventTime": "2017-03-11T16:59:40Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d48b377a-ef07-4ee7-9c22-76a6eb150d2e", "record_id": "flaws_cloudtrail:0000269:d48b377a-ef07-4ee7-9c22-76a6eb150d2e", "row_index": 269, "timestamp": "2017-03-11T17:00:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d48b377a-ef07-4ee7-9c22-76a6eb150d2e", "eventTime": "2017-03-11T17:00:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "[aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90092b-5ec2-4cfa-b8c4-f4b05ec23684", "record_id": "flaws_cloudtrail:0000270:90092b-5ec2-4cfa-b8c4-f4b05ec23684", "row_index": 270, "timestamp": "2017-03-11T17:00:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVG2KSB47J88K80ZO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90092b-5ec2-4cfa-b8c4-f4b05ec23684", "eventTime": "2017-03-11T17:00:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVG2KSB47J88K80ZO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T15:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a466aeae-7141-4668-be2c-7a91c74f695e", "record_id": "flaws_cloudtrail:0000271:a466aeae-7141-4668-be2c-7a91c74f695e", "row_index": 271, "timestamp": "2017-03-11T17:00:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVG2KSB47J88K80ZO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a466aeae-7141-4668-be2c-7a91c74f695e", "eventTime": "2017-03-11T17:00:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVG2KSB47J88K80ZO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T15:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c315642-bee6-4583-9b49-3a088e71d90f", "record_id": "flaws_cloudtrail:0000272:e9c315642-bee6-4583-9b49-3a088e71d90f", "row_index": 272, "timestamp": "2017-03-11T17:00:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c315642-bee6-4583-9b49-3a088e71d90f", "eventTime": "2017-03-11T17:00:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14b4340d-59f4-4a94-8b51-0e880513a52e3", "record_id": "flaws_cloudtrail:0000273:14b4340d-59f4-4a94-8b51-0e880513a52e3", "row_index": 273, "timestamp": "2017-03-11T17:01:39Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14b4340d-59f4-4a94-8b51-0e880513a52e3", "eventTime": "2017-03-11T17:01:39Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6228cd75-cdde-4697-a23a-2170ecf64e07", "record_id": "flaws_cloudtrail:0000274:6228cd75-cdde-4697-a23a-2170ecf64e07", "row_index": 274, "timestamp": "2017-03-11T17:01:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "[aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 649, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6228cd75-cdde-4697-a23a-2170ecf64e07", "eventTime": "2017-03-11T17:01:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "[aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dfd74cd-ca1f-4974-94f7-e3d0a9823c2d", "record_id": "flaws_cloudtrail:0000275:1dfd74cd-ca1f-4974-94f7-e3d0a9823c2d", "row_index": 275, "timestamp": "2017-03-11T17:01:52Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dfd74cd-ca1f-4974-94f7-e3d0a9823c2d", "eventTime": "2017-03-11T17:01:52Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e6dfd0c-cf0d-46e1-a9c1-8276aa8d179f", "record_id": "flaws_cloudtrail:0000276:0e6dfd0c-cf0d-46e1-a9c1-8276aa8d179f", "row_index": 276, "timestamp": "2017-03-11T17:02:00Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAX6W5YFJQIDRJYZIA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e6dfd0c-cf0d-46e1-a9c1-8276aa8d179f", "eventTime": "2017-03-11T17:02:00Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAX6W5YFJQIDRJYZIA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T16:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e25442-c7ab-42a4-b8d5-99b93499f95e", "record_id": "flaws_cloudtrail:0000277:a0e25442-c7ab-42a4-b8d5-99b93499f95e", "row_index": 277, "timestamp": "2017-03-11T17:02:39Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e25442-c7ab-42a4-b8d5-99b93499f95e", "eventTime": "2017-03-11T17:02:39Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name list_apigateways cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "list_apigateways", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4fe1524-316a-483c-9d1e-6a0b0096ca66", "record_id": "flaws_cloudtrail:0000278:e4fe1524-316a-483c-9d1e-6a0b0096ca66", "row_index": 278, "timestamp": "2017-03-11T17:02:52Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAX6W5YFJQIDRJYZIA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4fe1524-316a-483c-9d1e-6a0b0096ca66", "eventTime": "2017-03-11T17:02:52Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAX6W5YFJQIDRJYZIA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T16:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6d0abf-e5a4-4a9e-9cbb-444d462df791", "record_id": "flaws_cloudtrail:0000279:1c6d0abf-e5a4-4a9e-9cbb-444d462df791", "row_index": 279, "timestamp": "2017-03-11T17:03:06Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6d0abf-e5a4-4a9e-9cbb-444d462df791", "eventTime": "2017-03-11T17:03:06Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9110de8-48ea-456f-85cb-cb3db364942c", "record_id": "flaws_cloudtrail:0000280:a9110de8-48ea-456f-85cb-cb3db364942c", "row_index": 280, "timestamp": "2017-03-11T17:03:08Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9110de8-48ea-456f-85cb-cb3db364942c", "eventTime": "2017-03-11T17:03:08Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fda4856-bfcf-4e76-b7f3-f85ce222a85f", "record_id": "flaws_cloudtrail:0000281:5fda4856-bfcf-4e76-b7f3-f85ce222a85f", "row_index": 281, "timestamp": "2017-03-11T17:03:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fda4856-bfcf-4e76-b7f3-f85ce222a85f", "eventTime": "2017-03-11T17:03:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "415b1656-6596-4aaf-a43d-3bf4889aca0c", "record_id": "flaws_cloudtrail:0000282:415b1656-6596-4aaf-a43d-3bf4889aca0c", "row_index": 282, "timestamp": "2017-03-11T17:03:42Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "415b1656-6596-4aaf-a43d-3bf4889aca0c", "eventTime": "2017-03-11T17:03:42Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad8c8ce-4a62-4328-bec7-02be42bedbfa", "record_id": "flaws_cloudtrail:0000283:aad8c8ce-4a62-4328-bec7-02be42bedbfa", "row_index": 283, "timestamp": "2017-03-11T17:03:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad8c8ce-4a62-4328-bec7-02be42bedbfa", "eventTime": "2017-03-11T17:03:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617104e4e-2a07-490a-b273-20dfb10c2c6e", "record_id": "flaws_cloudtrail:0000284:617104e4e-2a07-490a-b273-20dfb10c2c6e", "row_index": 284, "timestamp": "2017-03-11T17:05:04Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617104e4e-2a07-490a-b273-20dfb10c2c6e", "eventTime": "2017-03-11T17:05:04Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d824f427-6a6b-45e6-95e2-1fb51450", "record_id": "flaws_cloudtrail:0000285:d824f427-6a6b-45e6-95e2-1fb51450", "row_index": 285, "timestamp": "2017-03-11T17:05:12Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d824f427-6a6b-45e6-95e2-1fb51450", "eventTime": "2017-03-11T17:05:12Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "restapis", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa7e5015-14a6-455c-9921-970b32551", "record_id": "flaws_cloudtrail:0000286:aa7e5015-14a6-455c-9921-970b32551", "row_index": 286, "timestamp": "2017-03-11T17:05:49Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa7e5015-14a6-455c-9921-970b32551", "eventTime": "2017-03-11T17:05:49Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "797158f11-20d9-4992-b478-d6fcf4752fad", "record_id": "flaws_cloudtrail:0000287:797158f11-20d9-4992-b478-d6fcf4752fad", "row_index": 287, "timestamp": "2017-03-11T17:05:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "797158f11-20d9-4992-b478-d6fcf4752fad", "eventTime": "2017-03-11T17:05:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3d12af-f125-4ed4-8b29-59acece65b17", "record_id": "flaws_cloudtrail:0000288:1b3d12af-f125-4ed4-8b29-59acece65b17", "row_index": 288, "timestamp": "2017-03-11T17:07:08Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3d12af-f125-4ed4-8b29-59acece65b17", "eventTime": "2017-03-11T17:07:08Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Resource identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"resourceId": "index", "httpMethod": "GET", "restApiId": "restapis", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "848c0afa-c118-47b5-8c7b-b78d8f549f63", "record_id": "flaws_cloudtrail:0000289:848c0afa-c118-47b5-8c7b-b78d8f549f63", "row_index": 289, "timestamp": "2017-03-11T17:07:12Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "848c0afa-c118-47b5-8c7b-b78d8f549f63", "eventTime": "2017-03-11T17:07:12Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f11511-8870-4985-a84e-a407cc8440dc", "record_id": "flaws_cloudtrail:0000290:0f11511-8870-4985-a84e-a407cc8440dc", "row_index": 290, "timestamp": "2017-03-11T17:07:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 638, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f11511-8870-4985-a84e-a407cc8440dc", "eventTime": "2017-03-11T17:07:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d373e70f-bed4-4814-9056-c22ac08ba103", "record_id": "flaws_cloudtrail:0000291:d373e70f-bed4-4814-9056-c22ac08ba103", "row_index": 291, "timestamp": "2017-03-11T17:07:43Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d373e70f-bed4-4814-9056-c22ac08ba103", "eventTime": "2017-03-11T17:07:43Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6555a42f-f10e-4dcd-8ee4-6fe24474c", "record_id": "flaws_cloudtrail:0000292:6555a42f-f10e-4dcd-8ee4-6fe24474c", "row_index": 292, "timestamp": "2017-03-11T17:07:51Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAX6W5YFJQIDRJYZIA", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6555a42f-f10e-4dcd-8ee4-6fe24474c", "eventTime": "2017-03-11T17:07:51Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAX6W5YFJQIDRJYZIA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T16:32:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04730e82-239b-4f90-b6a7-066e33f307dd", "record_id": "flaws_cloudtrail:0000293:04730e82-239b-4f90-b6a7-066e33f307dd", "row_index": 293, "timestamp": "2017-03-11T17:07:57Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04730e82-239b-4f90-b6a7-066e33f307dd", "eventTime": "2017-03-11T17:07:57Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a153ac8-c42b-48b0-95a0-7fa4f8b48cd5", "record_id": "flaws_cloudtrail:0000294:4a153ac8-c42b-48b0-95a0-7fa4f8b48cd5", "row_index": 294, "timestamp": "2017-03-11T17:08:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a153ac8-c42b-48b0-95a0-7fa4f8b48cd5", "eventTime": "2017-03-11T17:08:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded96292-e17b-4197-9ede-2626547a73b3", "record_id": "flaws_cloudtrail:0000295:ded96292-e17b-4197-9ede-2626547a73b3", "row_index": 295, "timestamp": "2017-03-11T17:08:37Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.208.251.193", "user_agent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded96292-e17b-4197-9ede-2626547a73b3", "eventTime": "2017-03-11T17:08:37Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.208.251.193", "userAgent": "aws-cli/1.11.14 Python/2.7.11 Linux/4.4.0-64-generic botocore/1.4.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23cf2eba-5025-4845-99ac-2f55942a645d", "record_id": "flaws_cloudtrail:0000296:23cf2eba-5025-4845-99ac-2f55942a645d", "row_index": 296, "timestamp": "2017-03-11T17:08:49Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA543XEX2BVVPOST54", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "181.186.229.8", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23cf2eba-5025-4845-99ac-2f55942a645d", "eventTime": "2017-03-11T17:08:49Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.186.229.8", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA543XEX2BVVPOST54", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T17:08:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2017/03/11/[$LATEST]e1103f33aac01d09bc322ac5be6e4775"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aced61de-fcfb-406f-b2e7-cfad2572d946", "record_id": "flaws_cloudtrail:0000297:aced61de-fcfb-406f-b2e7-cfad2572d946", "row_index": 297, "timestamp": "2017-03-11T17:08:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1215, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aced61de-fcfb-406f-b2e7-cfad2572d946", "eventTime": "2017-03-11T17:08:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA543XEX2BVVPOST54", "expiration": "Mar 12, 2017 5:08:49 AM", "sessionToken": "FQoDYXdzEHoaDCkbgeNUIYNBeARFnCLfARhIFoJ7w+YgIjSfdrSwIibQD01qcs6WBKmc+QsiOSrqwC6egLiQ3dSMCqbPJTApNJXj3FviXK0TPDmRG5Dxpj0BqAYErjnnT43uXzIglujblgnJkJBwuIkhmx580Ryzo+CCM/SXqJRAJ0K7R/GSC/1WHOBmIf3ZSwaoe4IR6tNUgmuZTOn0zdJUd1VPw5qbwN/k7lAKkv6s0vrrRaZGuzdqF+/7wn6Y9xysUVKpKEW/xSEGKxTMBWCLqtBSpNT2Fd6uTtdIUtwUZ5EqkLvsGILyhrSQktvDz3jVNQf4Dkkood6QxgU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8521c6de-272c-40bc-a259-eabbe2b771b8", "record_id": "flaws_cloudtrail:0000298:8521c6de-272c-40bc-a259-eabbe2b771b8", "row_index": 298, "timestamp": "2017-03-11T17:12:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8521c6de-272c-40bc-a259-eabbe2b771b8", "eventTime": "2017-03-11T17:12:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c14ffe0-c792-4073-b91a-0627d66408ce", "record_id": "flaws_cloudtrail:0000299:4c14ffe0-c792-4073-b91a-0627d66408ce", "row_index": 299, "timestamp": "2017-03-11T17:12:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c14ffe0-c792-4073-b91a-0627d66408ce", "eventTime": "2017-03-11T17:12:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294ffafe-2f3c-4e37-a0ed-2fceedca4a17", "record_id": "flaws_cloudtrail:0000300:294ffafe-2f3c-4e37-a0ed-2fceedca4a17", "row_index": 300, "timestamp": "2017-03-11T17:13:28Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "122.250.22.141", "user_agent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294ffafe-2f3c-4e37-a0ed-2fceedca4a17", "eventTime": "2017-03-11T17:13:28Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "122.250.22.141", "userAgent": "aws-cli/1.10.17 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.4.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7e312de-2e11-425c-9d15-01c6049c2de1", "record_id": "flaws_cloudtrail:0000301:a7e312de-2e11-425c-9d15-01c6049c2de1", "row_index": 301, "timestamp": "2017-03-11T17:13:40Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7e312de-2e11-425c-9d15-01c6049c2de1", "eventTime": "2017-03-11T17:13:40Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfc729934-3c6a-4636-83f4-1cdcc1ef20f3", "record_id": "flaws_cloudtrail:0000302:cfc729934-3c6a-4636-83f4-1cdcc1ef20f3", "row_index": 302, "timestamp": "2017-03-11T17:14:10Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfc729934-3c6a-4636-83f4-1cdcc1ef20f3", "eventTime": "2017-03-11T17:14:10Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9976a386-d263-4021-a24b-718716f6c00e", "record_id": "flaws_cloudtrail:0000303:9976a386-d263-4021-a24b-718716f6c00e", "row_index": 303, "timestamp": "2017-03-11T17:15:07Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9976a386-d263-4021-a24b-718716f6c00e", "eventTime": "2017-03-11T17:15:07Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d79d73c-712d-4b98-87fc-fd818abc2b7e", "record_id": "flaws_cloudtrail:0000304:7d79d73c-712d-4b98-87fc-fd818abc2b7e", "row_index": 304, "timestamp": "2017-03-11T17:16:07Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d79d73c-712d-4b98-87fc-fd818abc2b7e", "eventTime": "2017-03-11T17:16:07Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c727c69-486d-4100-8b58-ced0f7abf8ba", "record_id": "flaws_cloudtrail:0000305:3c727c69-486d-4100-8b58-ced0f7abf8ba", "row_index": 305, "timestamp": "2017-03-11T17:16:14Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c727c69-486d-4100-8b58-ced0f7abf8ba", "eventTime": "2017-03-11T17:16:14Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACBDsey0gvXe2kUatCHhxAm0U9ENSO0pW0qRe5YCGYDtprNJiZ+B5UllVFV4+f2w0aTCk55CtwWIijjoMe/eg4vVaTc1/2FkrDe3gIBUU7qS3w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f842eb89-4086-4c2e-b390-347b23b044bf", "record_id": "flaws_cloudtrail:0000306:f842eb89-4086-4c2e-b390-347b23b044bf", "row_index": 306, "timestamp": "2017-03-11T17:16:14Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f842eb89-4086-4c2e-b390-347b23b044bf", "eventTime": "2017-03-11T17:16:14Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAdGw4GC7BbQkOeqXZEqVcZfTktmlYH+F+XXplDD4XJH1yVVGnuk5d55EMV6OzXijL246FJEyJTyhDro/y8AUR1YjvrPPw4uZIujKctuzr8J1w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a85599-9f1b-4348-8e54-55a7d76522", "record_id": "flaws_cloudtrail:0000307:a1a85599-9f1b-4348-8e54-55a7d76522", "row_index": 307, "timestamp": "2017-03-11T17:16:14Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a85599-9f1b-4348-8e54-55a7d76522", "eventTime": "2017-03-11T17:16:14Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033eef5f-9932-4080-953c-943827b22d20", "record_id": "flaws_cloudtrail:0000308:033eef5f-9932-4080-953c-943827b22d20", "row_index": 308, "timestamp": "2017-03-11T17:16:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033eef5f-9932-4080-953c-943827b22d20", "eventTime": "2017-03-11T17:16:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b877069b-2b12-4628-8e6a-059d10ac7452", "record_id": "flaws_cloudtrail:0000309:b877069b-2b12-4628-8e6a-059d10ac7452", "row_index": 309, "timestamp": "2017-03-11T17:17:05Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b877069b-2b12-4628-8e6a-059d10ac7452", "eventTime": "2017-03-11T17:17:05Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f25a854-2ff2-4c0a-b125-f494386f8fd9c", "record_id": "flaws_cloudtrail:0000310:3f25a854-2ff2-4c0a-b125-f494386f8fd9c", "row_index": 310, "timestamp": "2017-03-11T17:18:27Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f25a854-2ff2-4c0a-b125-f494386f8fd9c", "eventTime": "2017-03-11T17:18:27Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98820e-c225-40a5-b87c-b049364a55be", "record_id": "flaws_cloudtrail:0000311:98820e-c225-40a5-b87c-b049364a55be", "row_index": 311, "timestamp": "2017-03-11T17:19:04Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98820e-c225-40a5-b87c-b049364a55be", "eventTime": "2017-03-11T17:19:04Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b627e64-5b7e-493b-939a-ad3fe2449ed0", "record_id": "flaws_cloudtrail:0000312:8b627e64-5b7e-493b-939a-ad3fe2449ed0", "row_index": 312, "timestamp": "2017-03-11T17:19:46Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b627e64-5b7e-493b-939a-ad3fe2449ed0", "eventTime": "2017-03-11T17:19:46Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "arn:aws:lambda:us-west-2:811596193553:function:Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad5be433-0449-4504-9084-6fe31fa09621", "record_id": "flaws_cloudtrail:0000313:ad5be433-0449-4504-9084-6fe31fa09621", "row_index": 313, "timestamp": "2017-03-11T17:24:47Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad5be433-0449-4504-9084-6fe31fa09621", "eventTime": "2017-03-11T17:24:47Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "arn:aws:lambda:us-west-2:811596193553:function:Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6af1420d-662c-4982-b76f-531d2324b154", "record_id": "flaws_cloudtrail:0000314:6af1420d-662c-4982-b76f-531d2324b154", "row_index": 314, "timestamp": "2017-03-11T17:25:36Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6af1420d-662c-4982-b76f-531d2324b154", "eventTime": "2017-03-11T17:25:36Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2cb0693-8ea6-4293-a753-39c080efbe6e", "record_id": "flaws_cloudtrail:0000315:d2cb0693-8ea6-4293-a753-39c080efbe6e", "row_index": 315, "timestamp": "2017-03-11T17:26:13Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2cb0693-8ea6-4293-a753-39c080efbe6e", "eventTime": "2017-03-11T17:26:13Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88bce5e6-671c-4180-bf46-59765cc25dc", "record_id": "flaws_cloudtrail:0000316:88bce5e6-671c-4180-bf46-59765cc25dc", "row_index": 316, "timestamp": "2017-03-11T17:26:46Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88bce5e6-671c-4180-bf46-59765cc25dc", "eventTime": "2017-03-11T17:26:46Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b12cbd5-0b46-428a-a4ae-f1b1a477d9c2", "record_id": "flaws_cloudtrail:0000317:5b12cbd5-0b46-428a-a4ae-f1b1a477d9c2", "row_index": 317, "timestamp": "2017-03-11T17:27:06Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b12cbd5-0b46-428a-a4ae-f1b1a477d9c2", "eventTime": "2017-03-11T17:27:06Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c2f2915-f55d-4e25-a442-c9b11a37d97b", "record_id": "flaws_cloudtrail:0000318:3c2f2915-f55d-4e25-a442-c9b11a37d97b", "row_index": 318, "timestamp": "2017-03-11T17:27:31Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c2f2915-f55d-4e25-a442-c9b11a37d97b", "eventTime": "2017-03-11T17:27:31Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d93928cf-df58-452d-a44b-009d402ae137", "record_id": "flaws_cloudtrail:0000319:d93928cf-df58-452d-a44b-009d402ae137", "row_index": 319, "timestamp": "2017-03-11T17:28:02Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d93928cf-df58-452d-a44b-009d402ae137", "eventTime": "2017-03-11T17:28:02Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d1ec290-af35-4ad3-b819-cdb667d9044b", "record_id": "flaws_cloudtrail:0000320:4d1ec290-af35-4ad3-b819-cdb667d9044b", "row_index": 320, "timestamp": "2017-03-11T17:32:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d1ec290-af35-4ad3-b819-cdb667d9044b", "eventTime": "2017-03-11T17:32:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2T114UEH6S351IS0", "expiration": "Mar 11, 2017 11:54:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600ceaf6-6f24-4361-9867-d528aa3fc2a2", "record_id": "flaws_cloudtrail:0000321:600ceaf6-6f24-4361-9867-d528aa3fc2a2", "row_index": 321, "timestamp": "2017-03-11T17:33:01Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600ceaf6-6f24-4361-9867-d528aa3fc2a2", "eventTime": "2017-03-11T17:33:01Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABS5FeY6QfQIM/lFUpcLgCxMXgFApI3aQO/P2wr+aItitHIKjeB4W+rbna0BWhBku/rFC4tK41BKIJYNhVxgS3v8mGP0wIFySDkdjpXAsNF6Bg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "480baf36-ed7f-4543-913b-78c49a013272", "record_id": "flaws_cloudtrail:0000322:480baf36-ed7f-4543-913b-78c49a013272", "row_index": 322, "timestamp": "2017-03-11T17:33:01Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "480baf36-ed7f-4543-913b-78c49a013272", "eventTime": "2017-03-11T17:33:01Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ca2303-666c-4f5c-8640-ec0a9daa59c8", "record_id": "flaws_cloudtrail:0000323:b6ca2303-666c-4f5c-8640-ec0a9daa59c8", "row_index": 323, "timestamp": "2017-03-11T17:33:01Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ca2303-666c-4f5c-8640-ec0a9daa59c8", "eventTime": "2017-03-11T17:33:01Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACG9INlTE5rc9cNYEYaXXOivHvJ2HQbPe361yb3h+Ez2w+gIkyDdjXNW2T+sGQiLEY3cpvLwurifMX/8T7xg5BaydVU2RuVwbi/jIN1yHXAJ9Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce32cb59-1ccb-48a6-966d-e0de9c04a878", "record_id": "flaws_cloudtrail:0000324:ce32cb59-1ccb-48a6-966d-e0de9c04a878", "row_index": 324, "timestamp": "2017-03-11T17:33:14Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce32cb59-1ccb-48a6-966d-e0de9c04a878", "eventTime": "2017-03-11T17:33:14Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff34bde-055c-4130-8047-ab15f730a348", "record_id": "flaws_cloudtrail:0000325:eff34bde-055c-4130-8047-ab15f730a348", "row_index": 325, "timestamp": "2017-03-11T17:33:14Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff34bde-055c-4130-8047-ab15f730a348", "eventTime": "2017-03-11T17:33:14Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABOnZgCjshuRlDV5nblvQblEJjsHP+YwFd4bJL+17K8Lf9xsE702tNQTrvyful9Are0FdaBi5MCE5VW4wzvta+GfsYTBhZGgtviZgBpwLH4HgA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8202a29-5120-409a-b43f-fcc102a185b7", "record_id": "flaws_cloudtrail:0000326:d8202a29-5120-409a-b43f-fcc102a185b7", "row_index": 326, "timestamp": "2017-03-11T17:33:14Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8202a29-5120-409a-b43f-fcc102a185b7", "eventTime": "2017-03-11T17:33:14Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABhaQ6mQjksF5uRhx0+0n8Jg2dkPxNdqwWoIQxGnJFT69Q2jzAhwqb/w9tItvrlC7AmlAmfEr0Rwbw0EdU19jD+P1b09f6lE0e+AHJsaEPpaIg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf29cb11-5e75-40b6-a374-6381d06254f", "record_id": "flaws_cloudtrail:0000327:bf29cb11-5e75-40b6-a374-6381d06254f", "row_index": 327, "timestamp": "2017-03-11T17:59:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf29cb11-5e75-40b6-a374-6381d06254f", "eventTime": "2017-03-11T17:59:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffe65eae-c93c-46c7-9ee2-ee4a8f51df86", "record_id": "flaws_cloudtrail:0000328:ffe65eae-c93c-46c7-9ee2-ee4a8f51df86", "row_index": 328, "timestamp": "2017-03-11T18:02:46Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffe65eae-c93c-46c7-9ee2-ee4a8f51df86", "eventTime": "2017-03-11T18:02:46Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac28d9e8-5a39-438f-91b5-167d96f2b0aa", "record_id": "flaws_cloudtrail:0000329:ac28d9e8-5a39-438f-91b5-167d96f2b0aa", "row_index": 329, "timestamp": "2017-03-11T18:03:05Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac28d9e8-5a39-438f-91b5-167d96f2b0aa", "eventTime": "2017-03-11T18:03:05Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bb0367a-a288-4f96-98ba-85db61f140b5", "record_id": "flaws_cloudtrail:0000330:5bb0367a-a288-4f96-98ba-85db61f140b5", "row_index": 330, "timestamp": "2017-03-11T18:03:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.98.9.93", "user_agent": "[aws-cli/1.10.38 Python/2.7.10 Darwin/16.3.0 botocore/1.4.28]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 638, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bb0367a-a288-4f96-98ba-85db61f140b5", "eventTime": "2017-03-11T18:03:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.98.9.93", "userAgent": "[aws-cli/1.10.38 Python/2.7.10 Darwin/16.3.0 botocore/1.4.28]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c383614d-aa0e-4bf8-a301-c06734b9dacf", "record_id": "flaws_cloudtrail:0000331:c383614d-aa0e-4bf8-a301-c06734b9dacf", "row_index": 331, "timestamp": "2017-03-11T18:03:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.253.51.101", "user_agent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c383614d-aa0e-4bf8-a301-c06734b9dacf", "eventTime": "2017-03-11T18:03:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.253.51.101", "userAgent": "[aws-cli/1.11.36 Python/3.5.2+ Linux/4.8.0-41-generic botocore/1.4.93]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06cc3e7-ee56-4095-8dd7-57beb0548d9c", "record_id": "flaws_cloudtrail:0000332:f06cc3e7-ee56-4095-8dd7-57beb0548d9c", "row_index": 332, "timestamp": "2017-03-11T18:13:39Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06cc3e7-ee56-4095-8dd7-57beb0548d9c", "eventTime": "2017-03-11T18:13:39Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABE/4dovn/q0BJLaDO4aLxet0v7RmYcT3+NOMRtetiU55go13/8qdzNZR3lmX6rkNom5dFqHbydk6RTE8Oc1GUBLhr9UHIt+5+j+kouPFE8wng==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4850f31e-3ca5-461a-bcfe-f4821003c7a2", "record_id": "flaws_cloudtrail:0000333:4850f31e-3ca5-461a-bcfe-f4821003c7a2", "row_index": 333, "timestamp": "2017-03-11T18:13:39Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4850f31e-3ca5-461a-bcfe-f4821003c7a2", "eventTime": "2017-03-11T18:13:39Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dad1c8c6-902f-4347-80ec-7b32ba99fb0d", "record_id": "flaws_cloudtrail:0000334:dad1c8c6-902f-4347-80ec-7b32ba99fb0d", "row_index": 334, "timestamp": "2017-03-11T18:13:39Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dad1c8c6-902f-4347-80ec-7b32ba99fb0d", "eventTime": "2017-03-11T18:13:39Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABG5nojQavUEdmFsbuIHs5SXz1hLKl9jKqImk6v6MBmKmnVE0p/qOTBH7AGdA2vKEu72LuQ9H7vGUgrIRG6HVsfDwy6tOqD9VUAH8VPaap5l+Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d5b48d8-4ef6-4a08-8f14-13874e17e", "record_id": "flaws_cloudtrail:0000335:6d5b48d8-4ef6-4a08-8f14-13874e17e", "row_index": 335, "timestamp": "2017-03-11T18:14:04Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d5b48d8-4ef6-4a08-8f14-13874e17e", "eventTime": "2017-03-11T18:14:04Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "579665b2-896f-4551-99dc-c46fcb79c51e", "record_id": "flaws_cloudtrail:0000336:579665b2-896f-4551-99dc-c46fcb79c51e", "row_index": 336, "timestamp": "2017-03-11T18:15:50Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "579665b2-896f-4551-99dc-c46fcb79c51e", "eventTime": "2017-03-11T18:15:50Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c1a1562-8489-455a-880c-79b5f69a22bb", "record_id": "flaws_cloudtrail:0000337:7c1a1562-8489-455a-880c-79b5f69a22bb", "row_index": 337, "timestamp": "2017-03-11T18:15:51Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c1a1562-8489-455a-880c-79b5f69a22bb", "eventTime": "2017-03-11T18:15:51Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37284f9f-5017-4dc8-84d6-192ecd83098", "record_id": "flaws_cloudtrail:0000338:37284f9f-5017-4dc8-84d6-192ecd83098", "row_index": 338, "timestamp": "2017-03-11T18:15:52Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37284f9f-5017-4dc8-84d6-192ecd83098", "eventTime": "2017-03-11T18:15:52Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9c3a42d-cd4b-45a5-831c-8f9df278fc56", "record_id": "flaws_cloudtrail:0000339:a9c3a42d-cd4b-45a5-831c-8f9df278fc56", "row_index": 339, "timestamp": "2017-03-11T18:15:52Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9c3a42d-cd4b-45a5-831c-8f9df278fc56", "eventTime": "2017-03-11T18:15:52Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7287af04-c30d-4087-baa5-14f36a87b346", "record_id": "flaws_cloudtrail:0000340:7287af04-c30d-4087-baa5-14f36a87b346", "row_index": 340, "timestamp": "2017-03-11T18:15:53Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7287af04-c30d-4087-baa5-14f36a87b346", "eventTime": "2017-03-11T18:15:53Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35fe62ff-c704-4087-8de3-3fbc2d14e7d3", "record_id": "flaws_cloudtrail:0000341:35fe62ff-c704-4087-8de3-3fbc2d14e7d3", "row_index": 341, "timestamp": "2017-03-11T18:15:54Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35fe62ff-c704-4087-8de3-3fbc2d14e7d3", "eventTime": "2017-03-11T18:15:54Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dd7d274-3a42-4941-ad2d-f8a99aa5b48b", "record_id": "flaws_cloudtrail:0000342:0dd7d274-3a42-4941-ad2d-f8a99aa5b48b", "row_index": 342, "timestamp": "2017-03-11T18:15:55Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dd7d274-3a42-4941-ad2d-f8a99aa5b48b", "eventTime": "2017-03-11T18:15:55Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABtjjCH8ZS8KGEbhj1LUQHjvqc0RN0lHejcUEAM/g4vIk/UezHvqOgh4UZtj84AfqAK2Q3iYzi6x9HHjew7zcZGw1I1FPyyQaIfNYe986+UsGw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c7edc2-af08-46af-81c1-8a976cdce7a5", "record_id": "flaws_cloudtrail:0000343:40c7edc2-af08-46af-81c1-8a976cdce7a5", "row_index": 343, "timestamp": "2017-03-11T18:15:55Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c7edc2-af08-46af-81c1-8a976cdce7a5", "eventTime": "2017-03-11T18:15:55Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e6c9b6b-e905-4da8-a37e-c6a38bac8187", "record_id": "flaws_cloudtrail:0000344:3e6c9b6b-e905-4da8-a37e-c6a38bac8187", "row_index": 344, "timestamp": "2017-03-11T18:15:55Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e6c9b6b-e905-4da8-a37e-c6a38bac8187", "eventTime": "2017-03-11T18:15:55Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e2c26b7-8a22-4da9-b1d3-ab1099ddff43", "record_id": "flaws_cloudtrail:0000345:0e2c26b7-8a22-4da9-b1d3-ab1099ddff43", "row_index": 345, "timestamp": "2017-03-11T18:15:56Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e2c26b7-8a22-4da9-b1d3-ab1099ddff43", "eventTime": "2017-03-11T18:15:56Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91ee8da0-55ef-4786-9f37-30a5c19846", "record_id": "flaws_cloudtrail:0000346:91ee8da0-55ef-4786-9f37-30a5c19846", "row_index": 346, "timestamp": "2017-03-11T18:15:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91ee8da0-55ef-4786-9f37-30a5c19846", "eventTime": "2017-03-11T18:15:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAoIwSHjE0jYgBBm4oyltmLXV9YiKAX+WhtJXvfXD6N3YaW8nrtIbX0MY/vmCB74CnVwelCBKG1AJmLadALFK9EqRKoqE8iUgXstYmkQKhctcw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db13ceab-8427-469a-8e87-689783a306e", "record_id": "flaws_cloudtrail:0000347:db13ceab-8427-469a-8e87-689783a306e", "row_index": 347, "timestamp": "2017-03-11T18:15:57Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db13ceab-8427-469a-8e87-689783a306e", "eventTime": "2017-03-11T18:15:57Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05d4db46-d5d0-48de-8ecb-7be316230546", "record_id": "flaws_cloudtrail:0000348:05d4db46-d5d0-48de-8ecb-7be316230546", "row_index": 348, "timestamp": "2017-03-11T18:15:58Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05d4db46-d5d0-48de-8ecb-7be316230546", "eventTime": "2017-03-11T18:15:58Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17e903760-5d9c-4fb2-a0e4-ce2a53f6c984", "record_id": "flaws_cloudtrail:0000349:17e903760-5d9c-4fb2-a0e4-ce2a53f6c984", "row_index": 349, "timestamp": "2017-03-11T18:15:59Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17e903760-5d9c-4fb2-a0e4-ce2a53f6c984", "eventTime": "2017-03-11T18:15:59Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cad426a-b433-4c6e-9dda-17706ef8f12c", "record_id": "flaws_cloudtrail:0000350:4cad426a-b433-4c6e-9dda-17706ef8f12c", "row_index": 350, "timestamp": "2017-03-11T18:15:59Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cad426a-b433-4c6e-9dda-17706ef8f12c", "eventTime": "2017-03-11T18:15:59Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ba8d50-27d1-441b-934a-1b942db60005", "record_id": "flaws_cloudtrail:0000351:b7ba8d50-27d1-441b-934a-1b942db60005", "row_index": 351, "timestamp": "2017-03-11T18:16:00Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ba8d50-27d1-441b-934a-1b942db60005", "eventTime": "2017-03-11T18:16:00Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "CredentialReportNotPresentException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e80e38ea-f86c-49e1-b0f1-217407cae9e30", "record_id": "flaws_cloudtrail:0000352:e80e38ea-f86c-49e1-b0f1-217407cae9e30", "row_index": 352, "timestamp": "2017-03-11T18:16:01Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e80e38ea-f86c-49e1-b0f1-217407cae9e30", "eventTime": "2017-03-11T18:16:01Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d49128-58a6-4c44-9831-02f1091dda63", "record_id": "flaws_cloudtrail:0000353:3d49128-58a6-4c44-9831-02f1091dda63", "row_index": 353, "timestamp": "2017-03-11T18:16:02Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d49128-58a6-4c44-9831-02f1091dda63", "eventTime": "2017-03-11T18:16:02Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7ec04df-b36b-4218-ae17-8edb5c63875b", "record_id": "flaws_cloudtrail:0000354:a7ec04df-b36b-4218-ae17-8edb5c63875b", "row_index": 354, "timestamp": "2017-03-11T18:16:03Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7ec04df-b36b-4218-ae17-8edb5c63875b", "eventTime": "2017-03-11T18:16:03Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eecb3c63-2813-42d4-9c57-3f7a464c5c3c", "record_id": "flaws_cloudtrail:0000355:eecb3c63-2813-42d4-9c57-3f7a464c5c3c", "row_index": 355, "timestamp": "2017-03-11T18:16:04Z", "event_type": "DescribeClassicLinkInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eecb3c63-2813-42d4-9c57-3f7a464c5c3c", "eventTime": "2017-03-11T18:16:04Z", "eventName": "DescribeClassicLinkInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6846a38-dc2b-41f1-8026-ac50a164c627", "record_id": "flaws_cloudtrail:0000356:f6846a38-dc2b-41f1-8026-ac50a164c627", "row_index": 356, "timestamp": "2017-03-11T18:16:05Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6846a38-dc2b-41f1-8026-ac50a164c627", "eventTime": "2017-03-11T18:16:05Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6768c36-190f-46df-aa39-2565faa2bc1e", "record_id": "flaws_cloudtrail:0000357:a6768c36-190f-46df-aa39-2565faa2bc1e", "row_index": 357, "timestamp": "2017-03-11T18:16:05Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6768c36-190f-46df-aa39-2565faa2bc1e", "eventTime": "2017-03-11T18:16:05Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8576db16-e15f-4830-add3-6d1b6982f0c4", "record_id": "flaws_cloudtrail:0000358:8576db16-e15f-4830-add3-6d1b6982f0c4", "row_index": 358, "timestamp": "2017-03-11T18:16:06Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8576db16-e15f-4830-add3-6d1b6982f0c4", "eventTime": "2017-03-11T18:16:06Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e17cabc1-d661-4431-9622-21a42a30350", "record_id": "flaws_cloudtrail:0000359:e17cabc1-d661-4431-9622-21a42a30350", "row_index": 359, "timestamp": "2017-03-11T18:16:07Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e17cabc1-d661-4431-9622-21a42a30350", "eventTime": "2017-03-11T18:16:07Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50e97a15-a97a-4c51-8011-877c8ae92a0a", "record_id": "flaws_cloudtrail:0000360:50e97a15-a97a-4c51-8011-877c8ae92a0a", "row_index": 360, "timestamp": "2017-03-11T18:16:08Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAU08GF2DHW3VV0ZUF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50e97a15-a97a-4c51-8011-877c8ae92a0a", "eventTime": "2017-03-11T18:16:08Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAU08GF2DHW3VV0ZUF", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:16:01Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4183d95a-ee1f-42db-b9f5-f129bfcee95e", "record_id": "flaws_cloudtrail:0000361:4183d95a-ee1f-42db-b9f5-f129bfcee95e", "row_index": 361, "timestamp": "2017-03-11T18:16:09Z", "event_type": "DescribeHostReservations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4183d95a-ee1f-42db-b9f5-f129bfcee95e", "eventTime": "2017-03-11T18:16:09Z", "eventName": "DescribeHostReservations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostReservationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef170def-8166-4848-ac2e-30b5349f06c4", "record_id": "flaws_cloudtrail:0000362:ef170def-8166-4848-ac2e-30b5349f06c4", "row_index": 362, "timestamp": "2017-03-11T18:16:10Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef170def-8166-4848-ac2e-30b5349f06c4", "eventTime": "2017-03-11T18:16:10Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "025b6da2-8ea0-4dc7-8ca7-7d7ce2dedf9d", "record_id": "flaws_cloudtrail:0000363:025b6da2-8ea0-4dc7-8ca7-7d7ce2dedf9d", "row_index": 363, "timestamp": "2017-03-11T18:16:16Z", "event_type": "DescribeImportSnapshotTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA6PPYRHK1ZOFPVQK2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "025b6da2-8ea0-4dc7-8ca7-7d7ce2dedf9d", "eventTime": "2017-03-11T18:16:16Z", "eventName": "DescribeImportSnapshotTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6PPYRHK1ZOFPVQK2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:16:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a18cc78-f85a-4e8d-9502-31691dcd8e8b", "record_id": "flaws_cloudtrail:0000364:0a18cc78-f85a-4e8d-9502-31691dcd8e8b", "row_index": 364, "timestamp": "2017-03-11T18:16:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a18cc78-f85a-4e8d-9502-31691dcd8e8b", "eventTime": "2017-03-11T18:16:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c949d61-8ce9-45e0-af3e-148f6ebfabbf", "record_id": "flaws_cloudtrail:0000365:9c949d61-8ce9-45e0-af3e-148f6ebfabbf", "row_index": 365, "timestamp": "2017-03-11T18:18:02Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c949d61-8ce9-45e0-af3e-148f6ebfabbf", "eventTime": "2017-03-11T18:18:02Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be19a8a-1d80-4915-aeab-e0c01be0e06a", "record_id": "flaws_cloudtrail:0000366:6be19a8a-1d80-4915-aeab-e0c01be0e06a", "row_index": 366, "timestamp": "2017-03-11T18:18:03Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be19a8a-1d80-4915-aeab-e0c01be0e06a", "eventTime": "2017-03-11T18:18:03Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bad31a1-26c3-4187-b3ee-6c3fa6612ff4", "record_id": "flaws_cloudtrail:0000367:2bad31a1-26c3-4187-b3ee-6c3fa6612ff4", "row_index": 367, "timestamp": "2017-03-11T18:18:03Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bad31a1-26c3-4187-b3ee-6c3fa6612ff4", "eventTime": "2017-03-11T18:18:03Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a23fa15-6d0c-4647-aa87-e106044c890", "record_id": "flaws_cloudtrail:0000368:2a23fa15-6d0c-4647-aa87-e106044c890", "row_index": 368, "timestamp": "2017-03-11T18:18:04Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a23fa15-6d0c-4647-aa87-e106044c890", "eventTime": "2017-03-11T18:18:04Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44be9db-8b2b-4801-b40a-ef9bcb8d1865", "record_id": "flaws_cloudtrail:0000369:f44be9db-8b2b-4801-b40a-ef9bcb8d1865", "row_index": 369, "timestamp": "2017-03-11T18:18:22Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44be9db-8b2b-4801-b40a-ef9bcb8d1865", "eventTime": "2017-03-11T18:18:22Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf1e6380-4774-4359-baa4-ec7003d33c9f", "record_id": "flaws_cloudtrail:0000370:cf1e6380-4774-4359-baa4-ec7003d33c9f", "row_index": 370, "timestamp": "2017-03-11T18:18:22Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf1e6380-4774-4359-baa4-ec7003d33c9f", "eventTime": "2017-03-11T18:18:22Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88cfc572-589b-4cf4-9b6e-1737499e9ba5", "record_id": "flaws_cloudtrail:0000371:88cfc572-589b-4cf4-9b6e-1737499e9ba5", "row_index": 371, "timestamp": "2017-03-11T18:18:23Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88cfc572-589b-4cf4-9b6e-1737499e9ba5", "eventTime": "2017-03-11T18:18:23Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10c6a26-bb93-4067-80ab-2bf0f2046dfd", "record_id": "flaws_cloudtrail:0000372:c10c6a26-bb93-4067-80ab-2bf0f2046dfd", "row_index": 372, "timestamp": "2017-03-11T18:18:26Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10c6a26-bb93-4067-80ab-2bf0f2046dfd", "eventTime": "2017-03-11T18:18:26Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbdf542-e4a5-4ffb-be64-e040c8e996d1", "record_id": "flaws_cloudtrail:0000373:cdbdf542-e4a5-4ffb-be64-e040c8e996d1", "row_index": 373, "timestamp": "2017-03-11T18:18:27Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbdf542-e4a5-4ffb-be64-e040c8e996d1", "eventTime": "2017-03-11T18:18:27Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4566c14-029c-401a-b31e-c169851a2da2", "record_id": "flaws_cloudtrail:0000374:c4566c14-029c-401a-b31e-c169851a2da2", "row_index": 374, "timestamp": "2017-03-11T18:18:28Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4566c14-029c-401a-b31e-c169851a2da2", "eventTime": "2017-03-11T18:18:28Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e59e170-23d9-40ed-8913-0a407ec68c47", "record_id": "flaws_cloudtrail:0000375:6e59e170-23d9-40ed-8913-0a407ec68c47", "row_index": 375, "timestamp": "2017-03-11T18:18:29Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e59e170-23d9-40ed-8913-0a407ec68c47", "eventTime": "2017-03-11T18:18:29Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d805d235-7809-43a9-9e6a-abb93a86ae2f", "record_id": "flaws_cloudtrail:0000376:d805d235-7809-43a9-9e6a-abb93a86ae2f", "row_index": 376, "timestamp": "2017-03-11T18:18:29Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d805d235-7809-43a9-9e6a-abb93a86ae2f", "eventTime": "2017-03-11T18:18:29Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdccae70-505f-48c4-9354-9e1ceab24200", "record_id": "flaws_cloudtrail:0000377:bdccae70-505f-48c4-9354-9e1ceab24200", "row_index": 377, "timestamp": "2017-03-11T18:18:30Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdccae70-505f-48c4-9354-9e1ceab24200", "eventTime": "2017-03-11T18:18:30Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdea911a-5def-4e1e-b64c-cb7273e84446", "record_id": "flaws_cloudtrail:0000378:cdea911a-5def-4e1e-b64c-cb7273e84446", "row_index": 378, "timestamp": "2017-03-11T18:18:31Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdea911a-5def-4e1e-b64c-cb7273e84446", "eventTime": "2017-03-11T18:18:31Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACg/m3/tJpfkUmWRU6Va3DsifprHhRU4DPQQjwXqfrHjy5s45vVbQNbUGQlz0rt6wsTlasTMBFZENt7WwY9nGV83WSssbf1ZLuqMbQkMYXUAYA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c95ff2-93ec-4183-93f9-d885dce0ebf2", "record_id": "flaws_cloudtrail:0000379:07c95ff2-93ec-4183-93f9-d885dce0ebf2", "row_index": 379, "timestamp": "2017-03-11T18:18:31Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c95ff2-93ec-4183-93f9-d885dce0ebf2", "eventTime": "2017-03-11T18:18:31Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89fdae0e-14ff-496b-a5a2-368479ec37f21", "record_id": "flaws_cloudtrail:0000380:89fdae0e-14ff-496b-a5a2-368479ec37f21", "row_index": 380, "timestamp": "2017-03-11T18:18:31Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89fdae0e-14ff-496b-a5a2-368479ec37f21", "eventTime": "2017-03-11T18:18:31Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb03a537-dd38-4389-8d2c-be6ef5def1dd", "record_id": "flaws_cloudtrail:0000381:eb03a537-dd38-4389-8d2c-be6ef5def1dd", "row_index": 381, "timestamp": "2017-03-11T18:18:32Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb03a537-dd38-4389-8d2c-be6ef5def1dd", "eventTime": "2017-03-11T18:18:32Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAN+Cjz/qz8NY3NZ4kjuv9fhba/3OjRslvNrR/vpxzIQ1//+vohD2aOQcCQpMj1Dn8d/dhYGtWvU4Pd8S6+n2PV/l69XNFVlR9qDpymyMhxx5w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4fffab9-ef82-4e40-b6c1-8273d86890c0", "record_id": "flaws_cloudtrail:0000382:a4fffab9-ef82-4e40-b6c1-8273d86890c0", "row_index": 382, "timestamp": "2017-03-11T18:18:32Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4fffab9-ef82-4e40-b6c1-8273d86890c0", "eventTime": "2017-03-11T18:18:32Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e733150bf-0bb1-4a8f-bead-e60aa786d965", "record_id": "flaws_cloudtrail:0000383:e733150bf-0bb1-4a8f-bead-e60aa786d965", "row_index": 383, "timestamp": "2017-03-11T18:18:33Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e733150bf-0bb1-4a8f-bead-e60aa786d965", "eventTime": "2017-03-11T18:18:33Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38aa8e08-d8d6-4f41-851c-26bbee764768", "record_id": "flaws_cloudtrail:0000384:38aa8e08-d8d6-4f41-851c-26bbee764768", "row_index": 384, "timestamp": "2017-03-11T18:18:34Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38aa8e08-d8d6-4f41-851c-26bbee764768", "eventTime": "2017-03-11T18:18:34Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0837c417-a03b-4b9e-b959-2c1f422240", "record_id": "flaws_cloudtrail:0000385:0837c417-a03b-4b9e-b959-2c1f422240", "row_index": 385, "timestamp": "2017-03-11T18:18:34Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0837c417-a03b-4b9e-b959-2c1f422240", "eventTime": "2017-03-11T18:18:34Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a468598-4927-4209-a490-180deed835191", "record_id": "flaws_cloudtrail:0000386:5a468598-4927-4209-a490-180deed835191", "row_index": 386, "timestamp": "2017-03-11T18:18:35Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a468598-4927-4209-a490-180deed835191", "eventTime": "2017-03-11T18:18:35Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2369d847-6aa5-4ec1-aece-9d162932862c", "record_id": "flaws_cloudtrail:0000387:2369d847-6aa5-4ec1-aece-9d162932862c", "row_index": 387, "timestamp": "2017-03-11T18:18:36Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2369d847-6aa5-4ec1-aece-9d162932862c", "eventTime": "2017-03-11T18:18:36Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "CredentialReportNotPresentException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eea62e0-81bf-40a6-b2fe-9104d1a721ee", "record_id": "flaws_cloudtrail:0000388:0eea62e0-81bf-40a6-b2fe-9104d1a721ee", "row_index": 388, "timestamp": "2017-03-11T18:18:37Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eea62e0-81bf-40a6-b2fe-9104d1a721ee", "eventTime": "2017-03-11T18:18:37Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc443bb6-ff48-4d46-90c2-f77d24a4bc54", "record_id": "flaws_cloudtrail:0000389:dc443bb6-ff48-4d46-90c2-f77d24a4bc54", "row_index": 389, "timestamp": "2017-03-11T18:18:37Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc443bb6-ff48-4d46-90c2-f77d24a4bc54", "eventTime": "2017-03-11T18:18:37Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "055867dbe-3a7f-4f98-bf79-ac50d62dbd27", "record_id": "flaws_cloudtrail:0000390:055867dbe-3a7f-4f98-bf79-ac50d62dbd27", "row_index": 390, "timestamp": "2017-03-11T18:18:38Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "055867dbe-3a7f-4f98-bf79-ac50d62dbd27", "eventTime": "2017-03-11T18:18:38Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e414267b-3936-476b-a678-d4fd2981ae14", "record_id": "flaws_cloudtrail:0000391:e414267b-3936-476b-a678-d4fd2981ae14", "row_index": 391, "timestamp": "2017-03-11T18:18:39Z", "event_type": "DescribeClassicLinkInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e414267b-3936-476b-a678-d4fd2981ae14", "eventTime": "2017-03-11T18:18:39Z", "eventName": "DescribeClassicLinkInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "109857a50-e9ac-4109-a88c-f49bb4b0f35a", "record_id": "flaws_cloudtrail:0000392:109857a50-e9ac-4109-a88c-f49bb4b0f35a", "row_index": 392, "timestamp": "2017-03-11T18:18:40Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "109857a50-e9ac-4109-a88c-f49bb4b0f35a", "eventTime": "2017-03-11T18:18:40Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71b2ebfe-974a-40de-ae1b-059bb3c46c65", "record_id": "flaws_cloudtrail:0000393:71b2ebfe-974a-40de-ae1b-059bb3c46c65", "row_index": 393, "timestamp": "2017-03-11T18:18:41Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71b2ebfe-974a-40de-ae1b-059bb3c46c65", "eventTime": "2017-03-11T18:18:41Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c96a9242-7e21-4ce2-a81d-b3d99ea7b651", "record_id": "flaws_cloudtrail:0000394:c96a9242-7e21-4ce2-a81d-b3d99ea7b651", "row_index": 394, "timestamp": "2017-03-11T18:18:41Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c96a9242-7e21-4ce2-a81d-b3d99ea7b651", "eventTime": "2017-03-11T18:18:41Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716d56c7-1e67-4a91-bca7-6c771b8562c9", "record_id": "flaws_cloudtrail:0000395:716d56c7-1e67-4a91-bca7-6c771b8562c9", "row_index": 395, "timestamp": "2017-03-11T18:18:42Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716d56c7-1e67-4a91-bca7-6c771b8562c9", "eventTime": "2017-03-11T18:18:42Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec4165ab-2fa0-40b8-8efd-bc994c2dbe17", "record_id": "flaws_cloudtrail:0000396:ec4165ab-2fa0-40b8-8efd-bc994c2dbe17", "row_index": 396, "timestamp": "2017-03-11T18:18:43Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAV3G99OEOE3XQPOTC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec4165ab-2fa0-40b8-8efd-bc994c2dbe17", "eventTime": "2017-03-11T18:18:43Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAV3G99OEOE3XQPOTC", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:18:43Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "626840cc7-0cef-4e8c-9617-183a184545", "record_id": "flaws_cloudtrail:0000397:626840cc7-0cef-4e8c-9617-183a184545", "row_index": 397, "timestamp": "2017-03-11T18:18:44Z", "event_type": "DescribeHostReservations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "626840cc7-0cef-4e8c-9617-183a184545", "eventTime": "2017-03-11T18:18:44Z", "eventName": "DescribeHostReservations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostReservationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da40183-5ebd-474e-9946-62336d368", "record_id": "flaws_cloudtrail:0000398:3da40183-5ebd-474e-9946-62336d368", "row_index": 398, "timestamp": "2017-03-11T18:18:45Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da40183-5ebd-474e-9946-62336d368", "eventTime": "2017-03-11T18:18:45Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b492c23f-3870-464c-9109-05505b6eb29", "record_id": "flaws_cloudtrail:0000399:b492c23f-3870-464c-9109-05505b6eb29", "row_index": 399, "timestamp": "2017-03-11T18:18:55Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b492c23f-3870-464c-9109-05505b6eb29", "eventTime": "2017-03-11T18:18:55Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41603e4d-a6f8-484e-bd0b-38021f5b1820", "record_id": "flaws_cloudtrail:0000400:41603e4d-a6f8-484e-bd0b-38021f5b1820", "row_index": 400, "timestamp": "2017-03-11T18:20:03Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAW2GUGD1EUCALXLE3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41603e4d-a6f8-484e-bd0b-38021f5b1820", "eventTime": "2017-03-11T18:20:03Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAW2GUGD1EUCALXLE3", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:18:38Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecc5a4e6-cf20-4151-b114-4fa02a37227", "record_id": "flaws_cloudtrail:0000401:ecc5a4e6-cf20-4151-b114-4fa02a37227", "row_index": 401, "timestamp": "2017-03-11T18:20:04Z", "event_type": "DescribeImportSnapshotTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAUD0HUWJC06FR0NRV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecc5a4e6-cf20-4151-b114-4fa02a37227", "eventTime": "2017-03-11T18:20:04Z", "eventName": "DescribeImportSnapshotTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAUD0HUWJC06FR0NRV", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:20:04Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a75f676e-0dfd-42a4-8a97-fd456872", "record_id": "flaws_cloudtrail:0000402:a75f676e-0dfd-42a4-8a97-fd456872", "row_index": 402, "timestamp": "2017-03-11T18:20:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a75f676e-0dfd-42a4-8a97-fd456872", "eventTime": "2017-03-11T18:20:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0117fce2-0f3a-4b68-9a94-b4d52f9425e8", "record_id": "flaws_cloudtrail:0000403:0117fce2-0f3a-4b68-9a94-b4d52f9425e8", "row_index": 403, "timestamp": "2017-03-11T18:20:05Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0117fce2-0f3a-4b68-9a94-b4d52f9425e8", "eventTime": "2017-03-11T18:20:05Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ed3e4f-ced8-4123-aef8-edaca3621e0f", "record_id": "flaws_cloudtrail:0000404:13ed3e4f-ced8-4123-aef8-edaca3621e0f", "row_index": 404, "timestamp": "2017-03-11T18:20:06Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ed3e4f-ced8-4123-aef8-edaca3621e0f", "eventTime": "2017-03-11T18:20:06Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84b0d8b1-1816-43af-9f39-065dd8d9f2d0", "record_id": "flaws_cloudtrail:0000405:84b0d8b1-1816-43af-9f39-065dd8d9f2d0", "row_index": 405, "timestamp": "2017-03-11T18:20:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84b0d8b1-1816-43af-9f39-065dd8d9f2d0", "eventTime": "2017-03-11T18:20:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a060ee-566b-45fe-9c50-d0ad0f1fa40e", "record_id": "flaws_cloudtrail:0000406:60a060ee-566b-45fe-9c50-d0ad0f1fa40e", "row_index": 406, "timestamp": "2017-03-11T18:20:08Z", "event_type": "DescribeMovingAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAIN2CXOG6BZ0P76E3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a060ee-566b-45fe-9c50-d0ad0f1fa40e", "eventTime": "2017-03-11T18:20:08Z", "eventName": "DescribeMovingAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIN2CXOG6BZ0P76E3", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:20:08Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"movingAddressStatusSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c333eb2-b3b3-45d4-9918-b98fafd179c9", "record_id": "flaws_cloudtrail:0000407:5c333eb2-b3b3-45d4-9918-b98fafd179c9", "row_index": 407, "timestamp": "2017-03-11T18:20:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c333eb2-b3b3-45d4-9918-b98fafd179c9", "eventTime": "2017-03-11T18:20:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb3a7e06-4556-4e71-a33e-efbe884bb2f4", "record_id": "flaws_cloudtrail:0000408:eb3a7e06-4556-4e71-a33e-efbe884bb2f4", "row_index": 408, "timestamp": "2017-03-11T18:20:09Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb3a7e06-4556-4e71-a33e-efbe884bb2f4", "eventTime": "2017-03-11T18:20:09Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aaafd63-1a7f-4f93-a2ad-d5b0dd025a33", "record_id": "flaws_cloudtrail:0000409:8aaafd63-1a7f-4f93-a2ad-d5b0dd025a33", "row_index": 409, "timestamp": "2017-03-11T18:20:10Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aaafd63-1a7f-4f93-a2ad-d5b0dd025a33", "eventTime": "2017-03-11T18:20:10Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db55ff3e-45e2-4a93-9708-71311e141fe9", "record_id": "flaws_cloudtrail:0000410:db55ff3e-45e2-4a93-9708-71311e141fe9", "row_index": 410, "timestamp": "2017-03-11T18:20:11Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db55ff3e-45e2-4a93-9708-71311e141fe9", "eventTime": "2017-03-11T18:20:11Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f81bbb9-1930-4ec2-a47a-1e6ff9217cf1", "record_id": "flaws_cloudtrail:0000411:7f81bbb9-1930-4ec2-a47a-1e6ff9217cf1", "row_index": 411, "timestamp": "2017-03-11T18:20:12Z", "event_type": "DescribeReservedInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f81bbb9-1930-4ec2-a47a-1e6ff9217cf1", "eventTime": "2017-03-11T18:20:12Z", "eventName": "DescribeReservedInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "108984-3bd8-423a-b423-719517b3cc3", "record_id": "flaws_cloudtrail:0000412:108984-3bd8-423a-b423-719517b3cc3", "row_index": 412, "timestamp": "2017-03-11T18:20:13Z", "event_type": "DescribeReservedInstancesListings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "108984-3bd8-423a-b423-719517b3cc3", "eventTime": "2017-03-11T18:20:13Z", "eventName": "DescribeReservedInstancesListings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "Client.OptInRequired", "errorMessage": "AccountId '811596193553', You are not authorized to use the requested product. Please complete the seller registration https://portal.aws.amazon.com/ec2/ri/seller_registration?action=businessInfo.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesListingSet": {}, "reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d5a17a-f546-4e80-9bd0-a21b208042ee9", "record_id": "flaws_cloudtrail:0000413:90d5a17a-f546-4e80-9bd0-a21b208042ee9", "row_index": 413, "timestamp": "2017-03-11T18:20:14Z", "event_type": "DescribeReservedInstancesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d5a17a-f546-4e80-9bd0-a21b208042ee9", "eventTime": "2017-03-11T18:20:14Z", "eventName": "DescribeReservedInstancesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesModificationSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c590598-b6c1-48fb-90d2-ca04ae3dd1fa", "record_id": "flaws_cloudtrail:0000414:8c590598-b6c1-48fb-90d2-ca04ae3dd1fa", "row_index": 414, "timestamp": "2017-03-11T18:20:15Z", "event_type": "DescribeScheduledInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c590598-b6c1-48fb-90d2-ca04ae3dd1fa", "eventTime": "2017-03-11T18:20:15Z", "eventName": "DescribeScheduledInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeScheduledInstancesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72ecaf49-3b74-408a-a0fe-47a1015a99df", "record_id": "flaws_cloudtrail:0000415:72ecaf49-3b74-408a-a0fe-47a1015a99df", "row_index": 415, "timestamp": "2017-03-11T18:20:15Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72ecaf49-3b74-408a-a0fe-47a1015a99df", "eventTime": "2017-03-11T18:20:15Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f12a251-f617-45c1-a6b4-43ff2f944b54", "record_id": "flaws_cloudtrail:0000416:4f12a251-f617-45c1-a6b4-43ff2f944b54", "row_index": 416, "timestamp": "2017-03-11T18:20:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f12a251-f617-45c1-a6b4-43ff2f944b54", "eventTime": "2017-03-11T18:20:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55e6b5b6-d1f8-4e41-860a-2b3ada8fe26e", "record_id": "flaws_cloudtrail:0000417:55e6b5b6-d1f8-4e41-860a-2b3ada8fe26e", "row_index": 417, "timestamp": "2017-03-11T18:20:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55e6b5b6-d1f8-4e41-860a-2b3ada8fe26e", "eventTime": "2017-03-11T18:20:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5facff7a-2152-4149-8092-44dfb56559", "record_id": "flaws_cloudtrail:0000418:5facff7a-2152-4149-8092-44dfb56559", "row_index": 418, "timestamp": "2017-03-11T18:20:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5facff7a-2152-4149-8092-44dfb56559", "eventTime": "2017-03-11T18:20:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmTzRhbjNGRE9wd1VVRW1CK1ZzKzVyS3hKcEIxUlNHNFhpQnhETEhWS083SG1odGoyR1B0QVZETHN4NG5FY3U3YmZQVlNiODdlT25OWkNPek5kZnNHY2loaXZIMXk5N21TMFJjSlp1cjhXRzBrWVVZOENKNkZhOHVSTXRXV1FWM3A2RGxERFRndVBsVnYxUlJGcU8yVXF0NzFRVmlLcDlJbWx3aHRsbzFMTjVCeTFubEI3cW5nL29ZZmJ3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26402f-92c1-49a3-a3d6-6855a1c5fcbb", "record_id": "flaws_cloudtrail:0000419:f26402f-92c1-49a3-a3d6-6855a1c5fcbb", "row_index": 419, "timestamp": "2017-03-11T18:20:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26402f-92c1-49a3-a3d6-6855a1c5fcbb", "eventTime": "2017-03-11T18:20:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Y1YycSt4Ry9CZVhCN0JaWURTeWRicnVlNWEwT1NBeGN2ZUNSdWs2U3RLbFhva1NIVGRrMDlaM0xCakpHQmsrTndLSEN5c3JMemI1VEdGaGZ5LzBlVnNiQjhLRmdEUndxNW5xaktMUGYzdXdOVEVsMHM3ZUV0dDhVQjVPcmJLOUJjbSt4T1p6NUJ6TUtSbFBpQzJWd3RINDNHcy9WSFR4ZHlEMTVmL1c0Kzk3dnZTM09sOFZJbmErIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "752d9be0-598e-44bc-8728-23ba874837e78", "record_id": "flaws_cloudtrail:0000420:752d9be0-598e-44bc-8728-23ba874837e78", "row_index": 420, "timestamp": "2017-03-11T18:20:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "752d9be0-598e-44bc-8728-23ba874837e78", "eventTime": "2017-03-11T18:20:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmOHY1WGFwR1haT2ZoanJRR29EMTAwOVVLNm9Uckw1Ukk3UHUvMEMrRkp2QzhlTXA1Z05Ucmc1dXY5SGk1cUJ2VjZpVE5LWFdVUWI2dU8yVGUxUTRpemJLN045cGVrWWJPUlI3VDd5S1FsYnM2N0ZyU3RnRDBIdkxjem5WQ1d5MjdGRUJyMkQ2R1RubUo3alJkbHd0OXI1MExwYWhYS1g0dmxVTzJZZ255d2pQM1hha1UxZGJpYkwyMGpjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dfdcacb-d2ac-41be-8f8b-0c3d800332d0", "record_id": "flaws_cloudtrail:0000421:9dfdcacb-d2ac-41be-8f8b-0c3d800332d0", "row_index": 421, "timestamp": "2017-03-11T18:20:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dfdcacb-d2ac-41be-8f8b-0c3d800332d0", "eventTime": "2017-03-11T18:20:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEcTg1NzE3Zjc2dklFdGJxeUJRM25FM0I2VGR0MldNL0dDUXFVZ2lMMWhncmN5VnpTR2ljZldiR2k4a1JRVmVkc1Z1bnVKMzZWTXpKcWdWTWlibDBwdFBXeDRsZzFZY0tBRCtMMElEbWxqMUdWTEczRTJvUVNGdFFTdlhJMUY3OHZscHR1MDY5aUJGb0tUT1BodnZORG5ITGtUeE9SZG9uL0dCTEN0c2FCVlZFbDZmRjNBMHk1eWFCUWkrYVpFWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf908caf-1243-4a53-98b3-fde63a38ad47", "record_id": "flaws_cloudtrail:0000422:bf908caf-1243-4a53-98b3-fde63a38ad47", "row_index": 422, "timestamp": "2017-03-11T18:20:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf908caf-1243-4a53-98b3-fde63a38ad47", "eventTime": "2017-03-11T18:20:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTU1qOStOVTVhOHl0dVdJMEpRc0hzTnlWQWlnQWFWV2tyZ0lGbnRRYXJZWk9MOXA3ZFBEdzV4Z3RydHRUdnRnZG93U1dqY3hrV1dTYUtKKzdYUWdZR3M4OGpzRmRTT29XbDJLaVpQZjVnTkxSOEdoZzhmNCtENStVM2hvSmFLWXFrVldQMDRRY3VBakI3WkdDS012clZSZEVFREgyYy9TR2J3Nm1LQThlbGhqaHJQQ2VtbW1UT29MUHAwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "115635-5171-4127-af52-4a9707a1d000", "record_id": "flaws_cloudtrail:0000423:115635-5171-4127-af52-4a9707a1d000", "row_index": 423, "timestamp": "2017-03-11T18:20:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "115635-5171-4127-af52-4a9707a1d000", "eventTime": "2017-03-11T18:20:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaeFVjYldwby96amNOaFFKbEcrM0kwemZiMkI3WkNRZDVXK21McWQ1ZUtkSENXUnV1TFBUTStVeVllekJNZUhNYy9lNUtGbGlaU25ERVZoQUpTZU1oOHlRWW1KRW1FQ1hvY3RSV09WbUtuQ09tTFlJeWszelpTWjZja2FqbFRUNU94SzRUK0dBMGVuOGZGOThLUnJaeVFLSHpzYzRHRkxBbkFTMm0wS1lQc3RUZjNTWVJITWxpdFBUZmFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "583eacf5-f46a-4535-b1cb-c37847562666", "record_id": "flaws_cloudtrail:0000424:583eacf5-f46a-4535-b1cb-c37847562666", "row_index": 424, "timestamp": "2017-03-11T18:20:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "583eacf5-f46a-4535-b1cb-c37847562666", "eventTime": "2017-03-11T18:20:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKRFQwS0RZUldKTDlFY3VGNlp6THFCWUs4TkJha01MOFFSYnVicnpkQXBqTkRxQVdGZ1ZZSDhjUnM0aUM0c3FuOGwyMkp5YW9kSmVzcUppYTh5dGZkbnVWRGMxazl5WER1RHhUbGJyOFAwRGV1RVczZTRiU2grQkxuQXp1V205N0E0UnppVTM5S0svMHFuUFdrSUwvTzJvUE56MERHTGZDSWtocXhZdGhpK2JDVk1NYmdUWGNPWnp4alhVWSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "174d4cc3-ce57-4594-8a67-60f49870f79e", "record_id": "flaws_cloudtrail:0000425:174d4cc3-ce57-4594-8a67-60f49870f79e", "row_index": 425, "timestamp": "2017-03-11T18:20:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "174d4cc3-ce57-4594-8a67-60f49870f79e", "eventTime": "2017-03-11T18:20:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaTGk3OUVMMWNvcjJPcEtNQWo1ZnNFQ3NZaS91NmlIRVQ1dk1nT2lYaWdieU9FTlBPVUpsTjZjRE8xWEhYWEtJS29Ob1NGTGh1OU5OU3R0TzJhdm42NkhJWnZ2b2t1Nk5sRlJnSFI2UTFHRGdVcW5xVjJjQ0J1MEJBaVFhRGIxV3AvUW9qMldKWDdaSFNUUFErODF1YW9SejhGU1NDWXkvWHo4RkhHd0lVZVhSeGpkWndyc0VFWlVZak1ZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ea1a9f-2f38-4ed9-8f9e-cc79585a74e3", "record_id": "flaws_cloudtrail:0000426:68ea1a9f-2f38-4ed9-8f9e-cc79585a74e3", "row_index": 426, "timestamp": "2017-03-11T18:20:35Z", "event_type": "DescribeSpotDatafeedSubscription", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ea1a9f-2f38-4ed9-8f9e-cc79585a74e3", "eventTime": "2017-03-11T18:20:35Z", "eventName": "DescribeSpotDatafeedSubscription", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSpotDatafeed.NotFound", "errorMessage": "Spot datafeed subscription does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bb9baae-bc9f-4062-8e63-2f1c7c112ff6", "record_id": "flaws_cloudtrail:0000427:6bb9baae-bc9f-4062-8e63-2f1c7c112ff6", "row_index": 427, "timestamp": "2017-03-11T18:20:36Z", "event_type": "DescribeSpotFleetRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bb9baae-bc9f-4062-8e63-2f1c7c112ff6", "eventTime": "2017-03-11T18:20:36Z", "eventName": "DescribeSpotFleetRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeSpotFleetRequestsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a777b3f8-48b1-4a83-9b87-b18abe1695b7", "record_id": "flaws_cloudtrail:0000428:a777b3f8-48b1-4a83-9b87-b18abe1695b7", "row_index": 428, "timestamp": "2017-03-11T18:20:37Z", "event_type": "DescribeSpotInstanceRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a777b3f8-48b1-4a83-9b87-b18abe1695b7", "eventTime": "2017-03-11T18:20:37Z", "eventName": "DescribeSpotInstanceRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"spotInstanceRequestIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb3374ef-b2c2-4cc0-b44d-aa41ea59e47b", "record_id": "flaws_cloudtrail:0000429:fb3374ef-b2c2-4cc0-b44d-aa41ea59e47b", "row_index": 429, "timestamp": "2017-03-11T18:20:38Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb3374ef-b2c2-4cc0-b44d-aa41ea59e47b", "eventTime": "2017-03-11T18:20:38Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74b4398a-de2b-445b-8a23-caeefaa9d64f", "record_id": "flaws_cloudtrail:0000430:74b4398a-de2b-445b-8a23-caeefaa9d64f", "row_index": 430, "timestamp": "2017-03-11T18:20:39Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74b4398a-de2b-445b-8a23-caeefaa9d64f", "eventTime": "2017-03-11T18:20:39Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "603bece6-87ed-42e5-be66-0aef654cb5a9", "record_id": "flaws_cloudtrail:0000431:603bece6-87ed-42e5-be66-0aef654cb5a9", "row_index": 431, "timestamp": "2017-03-11T18:20:40Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "603bece6-87ed-42e5-be66-0aef654cb5a9", "eventTime": "2017-03-11T18:20:40Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36fbbc6f-d253-487a-a433-cf5ad6da535e", "record_id": "flaws_cloudtrail:0000432:36fbbc6f-d253-487a-a433-cf5ad6da535e", "row_index": 432, "timestamp": "2017-03-11T18:20:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36fbbc6f-d253-487a-a433-cf5ad6da535e", "eventTime": "2017-03-11T18:20:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "880019ca1-1943-4edd-a8be-cccf4788fa26", "record_id": "flaws_cloudtrail:0000433:880019ca1-1943-4edd-a8be-cccf4788fa26", "row_index": 433, "timestamp": "2017-03-11T18:20:42Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "880019ca1-1943-4edd-a8be-cccf4788fa26", "eventTime": "2017-03-11T18:20:42Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8525e2de-4f1d-4666-bd21-3270b2692c3b", "record_id": "flaws_cloudtrail:0000434:8525e2de-4f1d-4666-bd21-3270b2692c3b", "row_index": 434, "timestamp": "2017-03-11T18:20:43Z", "event_type": "DescribeVpcClassicLinkDnsSupport", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8525e2de-4f1d-4666-bd21-3270b2692c3b", "eventTime": "2017-03-11T18:20:43Z", "eventName": "DescribeVpcClassicLinkDnsSupport", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcClassicLinkDnsSupportRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a92e27-53a9-4af7-bfd6-c6abe3bee01f", "record_id": "flaws_cloudtrail:0000435:80a92e27-53a9-4af7-bfd6-c6abe3bee01f", "row_index": 435, "timestamp": "2017-03-11T18:20:44Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIASBAIJKFWR2F8HJ39", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a92e27-53a9-4af7-bfd6-c6abe3bee01f", "eventTime": "2017-03-11T18:20:44Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIASBAIJKFWR2F8HJ39", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:20:44Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7b492269-4817-4250-8204-19cfe353881", "record_id": "flaws_cloudtrail:0000436:f7b492269-4817-4250-8204-19cfe353881", "row_index": 436, "timestamp": "2017-03-11T18:20:45Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7b492269-4817-4250-8204-19cfe353881", "eventTime": "2017-03-11T18:20:45Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86096d43-ecc4-47ea-9c30-43ef7642cf9d", "record_id": "flaws_cloudtrail:0000437:86096d43-ecc4-47ea-9c30-43ef7642cf9d", "row_index": 437, "timestamp": "2017-03-11T18:20:46Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86096d43-ecc4-47ea-9c30-43ef7642cf9d", "eventTime": "2017-03-11T18:20:46Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a084c4-559d-452d-997f-3b037cac9fe0", "record_id": "flaws_cloudtrail:0000438:a6a084c4-559d-452d-997f-3b037cac9fe0", "row_index": 438, "timestamp": "2017-03-11T18:20:47Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a084c4-559d-452d-997f-3b037cac9fe0", "eventTime": "2017-03-11T18:20:47Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68e644541-2f02-4614-8b31-1d3a96f262cd", "record_id": "flaws_cloudtrail:0000439:68e644541-2f02-4614-8b31-1d3a96f262cd", "row_index": 439, "timestamp": "2017-03-11T18:20:48Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68e644541-2f02-4614-8b31-1d3a96f262cd", "eventTime": "2017-03-11T18:20:48Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62e330c1-acff-4957-9e74-a50767d3e6", "record_id": "flaws_cloudtrail:0000440:62e330c1-acff-4957-9e74-a50767d3e6", "row_index": 440, "timestamp": "2017-03-11T18:20:49Z", "event_type": "DescribeCases", "event_source": "support.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62e330c1-acff-4957-9e74-a50767d3e6", "eventTime": "2017-03-11T18:20:49Z", "eventName": "DescribeCases", "eventSource": "support.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: support:", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff941f44-f4b4-489d-ac4e-958c1d1f9248", "record_id": "flaws_cloudtrail:0000441:ff941f44-f4b4-489d-ac4e-958c1d1f9248", "row_index": 441, "timestamp": "2017-03-11T18:20:50Z", "event_type": "DescribeInterconnects", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff941f44-f4b4-489d-ac4e-958c1d1f9248", "eventTime": "2017-03-11T18:20:50Z", "eventName": "DescribeInterconnects", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "DirectConnectClientException", "errorMessage": "Account 811596193553 is not an authorized Direct Connect partner.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80144af-02b8-43ca-88fc-74fc84610d9d", "record_id": "flaws_cloudtrail:0000442:80144af-02b8-43ca-88fc-74fc84610d9d", "row_index": 442, "timestamp": "2017-03-11T18:20:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80144af-02b8-43ca-88fc-74fc84610d9d", "eventTime": "2017-03-11T18:20:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "956944-5b1e-417d-8a4f-e5bc3f80398f", "record_id": "flaws_cloudtrail:0000443:956944-5b1e-417d-8a4f-e5bc3f80398f", "row_index": 443, "timestamp": "2017-03-11T18:20:51Z", "event_type": "DescribeVirtualGateways", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "956944-5b1e-417d-8a4f-e5bc3f80398f", "eventTime": "2017-03-11T18:20:51Z", "eventName": "DescribeVirtualGateways", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec261a3f-32a2-46f9-83f1-1973d6a1f60f", "record_id": "flaws_cloudtrail:0000444:ec261a3f-32a2-46f9-83f1-1973d6a1f60f", "row_index": 444, "timestamp": "2017-03-11T18:20:52Z", "event_type": "DescribeVirtualInterfaces", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec261a3f-32a2-46f9-83f1-1973d6a1f60f", "eventTime": "2017-03-11T18:20:52Z", "eventName": "DescribeVirtualInterfaces", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4715fa80-5bbc-4118-bccc-27e2487f1ee4", "record_id": "flaws_cloudtrail:0000445:4715fa80-5bbc-4118-bccc-27e2487f1ee4", "row_index": 445, "timestamp": "2017-03-11T18:20:53Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4715fa80-5bbc-4118-bccc-27e2487f1ee4", "eventTime": "2017-03-11T18:20:53Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412b8785-2709-4fe0-9e2e-6f13682b1bfd", "record_id": "flaws_cloudtrail:0000446:412b8785-2709-4fe0-9e2e-6f13682b1bfd", "row_index": 446, "timestamp": "2017-03-11T18:20:54Z", "event_type": "ListPublicKeys", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412b8785-2709-4fe0-9e2e-6f13682b1bfd", "eventTime": "2017-03-11T18:20:54Z", "eventName": "ListPublicKeys", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:ListPublicKeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "becb5eee-a539-44c5-bf67-13569d3a03a", "record_id": "flaws_cloudtrail:0000447:becb5eee-a539-44c5-bf67-13569d3a03a", "row_index": 447, "timestamp": "2017-03-11T18:20:55Z", "event_type": "DescribeAccountLimits", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "becb5eee-a539-44c5-bf67-13569d3a03a", "eventTime": "2017-03-11T18:20:55Z", "eventName": "DescribeAccountLimits", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudformation:DescribeAccountLimits", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee58444-e227-49e5-a408-12e766c34c8f", "record_id": "flaws_cloudtrail:0000448:cee58444-e227-49e5-a408-12e766c34c8f", "row_index": 448, "timestamp": "2017-03-11T18:20:56Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee58444-e227-49e5-a408-12e766c34c8f", "eventTime": "2017-03-11T18:20:56Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7441b3d-23b1-4ed0-b0c7-98e1052e80cf", "record_id": "flaws_cloudtrail:0000449:b7441b3d-23b1-4ed0-b0c7-98e1052e80cf", "row_index": 449, "timestamp": "2017-03-11T18:20:56Z", "event_type": "ListExports", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7441b3d-23b1-4ed0-b0c7-98e1052e80cf", "eventTime": "2017-03-11T18:20:56Z", "eventName": "ListExports", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudformation:ListExports", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b4998be-e709-474e-8be7-efc5da4dee25", "record_id": "flaws_cloudtrail:0000450:7b4998be-e709-474e-8be7-efc5da4dee25", "row_index": 450, "timestamp": "2017-03-11T18:20:57Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b4998be-e709-474e-8be7-efc5da4dee25", "eventTime": "2017-03-11T18:20:57Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93a5b91f-91f4-443d-9e20-39a5bda7b817", "record_id": "flaws_cloudtrail:0000451:93a5b91f-91f4-443d-9e20-39a5bda7b817", "row_index": 451, "timestamp": "2017-03-11T18:25:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 642, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93a5b91f-91f4-443d-9e20-39a5bda7b817", "eventTime": "2017-03-11T18:25:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "[aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ecda87-a13d-42a2-a334-65eb0e5bb4f2", "record_id": "flaws_cloudtrail:0000452:61ecda87-a13d-42a2-a334-65eb0e5bb4f2", "row_index": 452, "timestamp": "2017-03-11T18:27:27Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ecda87-a13d-42a2-a334-65eb0e5bb4f2", "eventTime": "2017-03-11T18:27:27Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "940c6494-2676-4dba-a6a5-8d08239e0598", "record_id": "flaws_cloudtrail:0000453:940c6494-2676-4dba-a6a5-8d08239e0598", "row_index": 453, "timestamp": "2017-03-11T18:27:28Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "940c6494-2676-4dba-a6a5-8d08239e0598", "eventTime": "2017-03-11T18:27:28Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa9c4404-99de-4c09-9908-b7d5bd839db5", "record_id": "flaws_cloudtrail:0000454:fa9c4404-99de-4c09-9908-b7d5bd839db5", "row_index": 454, "timestamp": "2017-03-11T18:27:29Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa9c4404-99de-4c09-9908-b7d5bd839db5", "eventTime": "2017-03-11T18:27:29Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c909de1-fae2-43f1-a160-425aa64e2e5e", "record_id": "flaws_cloudtrail:0000455:2c909de1-fae2-43f1-a160-425aa64e2e5e", "row_index": 455, "timestamp": "2017-03-11T18:27:30Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c909de1-fae2-43f1-a160-425aa64e2e5e", "eventTime": "2017-03-11T18:27:30Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ec9d86-9926-45a1-8cca-f3364b7f0a74", "record_id": "flaws_cloudtrail:0000456:b4ec9d86-9926-45a1-8cca-f3364b7f0a74", "row_index": 456, "timestamp": "2017-03-11T18:27:30Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ec9d86-9926-45a1-8cca-f3364b7f0a74", "eventTime": "2017-03-11T18:27:30Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66c1f913-a0e0-4ea3-ac03-9344f76ab1c1", "record_id": "flaws_cloudtrail:0000457:66c1f913-a0e0-4ea3-ac03-9344f76ab1c1", "row_index": 457, "timestamp": "2017-03-11T18:27:31Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66c1f913-a0e0-4ea3-ac03-9344f76ab1c1", "eventTime": "2017-03-11T18:27:31Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbe319699-a6ec-4bbf-81cb-c7268b60f43e", "record_id": "flaws_cloudtrail:0000458:dbe319699-a6ec-4bbf-81cb-c7268b60f43e", "row_index": 458, "timestamp": "2017-03-11T18:27:32Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbe319699-a6ec-4bbf-81cb-c7268b60f43e", "eventTime": "2017-03-11T18:27:32Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa289e1d-c206-4f09-8224-c23b11204", "record_id": "flaws_cloudtrail:0000459:fa289e1d-c206-4f09-8224-c23b11204", "row_index": 459, "timestamp": "2017-03-11T18:27:40Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa289e1d-c206-4f09-8224-c23b11204", "eventTime": "2017-03-11T18:27:40Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce276464-b85b-4dc3-9f7f-90d33acc2196", "record_id": "flaws_cloudtrail:0000460:ce276464-b85b-4dc3-9f7f-90d33acc2196", "row_index": 460, "timestamp": "2017-03-11T18:27:40Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce276464-b85b-4dc3-9f7f-90d33acc2196", "eventTime": "2017-03-11T18:27:40Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c0d459d-18e1-467f-8f14-402c7017d75f", "record_id": "flaws_cloudtrail:0000461:0c0d459d-18e1-467f-8f14-402c7017d75f", "row_index": 461, "timestamp": "2017-03-11T18:27:41Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c0d459d-18e1-467f-8f14-402c7017d75f", "eventTime": "2017-03-11T18:27:41Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "111facfa-eb37-41d3-a9e4-ce520a0ba34d", "record_id": "flaws_cloudtrail:0000462:111facfa-eb37-41d3-a9e4-ce520a0ba34d", "row_index": 462, "timestamp": "2017-03-11T18:27:42Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "111facfa-eb37-41d3-a9e4-ce520a0ba34d", "eventTime": "2017-03-11T18:27:42Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67a759e5-a851-4f94-af23-b50a6d881a2f", "record_id": "flaws_cloudtrail:0000463:67a759e5-a851-4f94-af23-b50a6d881a2f", "row_index": 463, "timestamp": "2017-03-11T18:27:43Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67a759e5-a851-4f94-af23-b50a6d881a2f", "eventTime": "2017-03-11T18:27:43Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47e2415b-3f42-4ec2-83bd-fec31bfe672c", "record_id": "flaws_cloudtrail:0000464:47e2415b-3f42-4ec2-83bd-fec31bfe672c", "row_index": 464, "timestamp": "2017-03-11T18:27:44Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47e2415b-3f42-4ec2-83bd-fec31bfe672c", "eventTime": "2017-03-11T18:27:44Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d53e97-3cc8-4778-9e70-0c4b18bf07a9", "record_id": "flaws_cloudtrail:0000465:61d53e97-3cc8-4778-9e70-0c4b18bf07a9", "row_index": 465, "timestamp": "2017-03-11T18:27:44Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d53e97-3cc8-4778-9e70-0c4b18bf07a9", "eventTime": "2017-03-11T18:27:44Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55ec3037-bd3d-4634-962d-92a05dfd699d", "record_id": "flaws_cloudtrail:0000466:55ec3037-bd3d-4634-962d-92a05dfd699d", "row_index": 466, "timestamp": "2017-03-11T18:27:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55ec3037-bd3d-4634-962d-92a05dfd699d", "eventTime": "2017-03-11T18:27:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACOp7f+tDcafxiG5pKgb7RLNVlbuWKhAfe6k1bsCR3LrcY5s3IDvv9gtiQA5znvifgnnmGE71/WG5YHsGspjHvw3iuWZBejnZ9Cn0PSdrEn0wg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2504acc2-d991-4bcb-9e78-5b9acb283f03", "record_id": "flaws_cloudtrail:0000467:2504acc2-d991-4bcb-9e78-5b9acb283f03", "row_index": 467, "timestamp": "2017-03-11T18:27:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2504acc2-d991-4bcb-9e78-5b9acb283f03", "eventTime": "2017-03-11T18:27:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABwfoHI0J1NZ+DWjX8/4p50bfnx3FJZeLx1U1cn52F4mkvGdqdQSeSM9mRVP6mZTwmrqKI/g/RL4Ggb6MGQOtAiM1beA88VNXduIx7hsc4vz/w==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c8ba05d-42ca-47d4-b552-1da8c1756d58", "record_id": "flaws_cloudtrail:0000468:3c8ba05d-42ca-47d4-b552-1da8c1756d58", "row_index": 468, "timestamp": "2017-03-11T18:27:45Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c8ba05d-42ca-47d4-b552-1da8c1756d58", "eventTime": "2017-03-11T18:27:45Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abd68ec9-8fc8-40c0-ac33-dafe84af1c0d", "record_id": "flaws_cloudtrail:0000469:abd68ec9-8fc8-40c0-ac33-dafe84af1c0d", "row_index": 469, "timestamp": "2017-03-11T18:27:46Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abd68ec9-8fc8-40c0-ac33-dafe84af1c0d", "eventTime": "2017-03-11T18:27:46Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6f0874a-7996-4d7f-8a68-f27f6d80bfd9", "record_id": "flaws_cloudtrail:0000470:e6f0874a-7996-4d7f-8a68-f27f6d80bfd9", "row_index": 470, "timestamp": "2017-03-11T18:27:47Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6f0874a-7996-4d7f-8a68-f27f6d80bfd9", "eventTime": "2017-03-11T18:27:47Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cc09bcc-82c5-4244-b888-a199110f261", "record_id": "flaws_cloudtrail:0000471:3cc09bcc-82c5-4244-b888-a199110f261", "row_index": 471, "timestamp": "2017-03-11T18:27:48Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cc09bcc-82c5-4244-b888-a199110f261", "eventTime": "2017-03-11T18:27:48Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6e14a5a-2c67-4247-9f8a-5306a0fd04c0", "record_id": "flaws_cloudtrail:0000472:d6e14a5a-2c67-4247-9f8a-5306a0fd04c0", "row_index": 472, "timestamp": "2017-03-11T18:27:48Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6e14a5a-2c67-4247-9f8a-5306a0fd04c0", "eventTime": "2017-03-11T18:27:48Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a79374-4cab-4ca0-8592-43f5cbfbf38d", "record_id": "flaws_cloudtrail:0000473:5a79374-4cab-4ca0-8592-43f5cbfbf38d", "row_index": 473, "timestamp": "2017-03-11T18:27:49Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a79374-4cab-4ca0-8592-43f5cbfbf38d", "eventTime": "2017-03-11T18:27:49Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee5ab04f-f019-464a-818e-0eda91cd964b", "record_id": "flaws_cloudtrail:0000474:ee5ab04f-f019-464a-818e-0eda91cd964b", "row_index": 474, "timestamp": "2017-03-11T18:27:50Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee5ab04f-f019-464a-818e-0eda91cd964b", "eventTime": "2017-03-11T18:27:50Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "CredentialReportNotPresentException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdb5d04-3154-48a9-8938-8c9c1a203dab", "record_id": "flaws_cloudtrail:0000475:bfdb5d04-3154-48a9-8938-8c9c1a203dab", "row_index": 475, "timestamp": "2017-03-11T18:27:51Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdb5d04-3154-48a9-8938-8c9c1a203dab", "eventTime": "2017-03-11T18:27:51Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6026d4ec-5b47-4059-b62f-c6dcf7e75364", "record_id": "flaws_cloudtrail:0000476:6026d4ec-5b47-4059-b62f-c6dcf7e75364", "row_index": 476, "timestamp": "2017-03-11T18:27:52Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6026d4ec-5b47-4059-b62f-c6dcf7e75364", "eventTime": "2017-03-11T18:27:52Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00572b5-8598-4af5-aff4-be025c92cbb4", "record_id": "flaws_cloudtrail:0000477:00572b5-8598-4af5-aff4-be025c92cbb4", "row_index": 477, "timestamp": "2017-03-11T18:27:53Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00572b5-8598-4af5-aff4-be025c92cbb4", "eventTime": "2017-03-11T18:27:53Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae352abf-5187-43c4-871f-880a36189c31", "record_id": "flaws_cloudtrail:0000478:ae352abf-5187-43c4-871f-880a36189c31", "row_index": 478, "timestamp": "2017-03-11T18:27:54Z", "event_type": "DescribeClassicLinkInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae352abf-5187-43c4-871f-880a36189c31", "eventTime": "2017-03-11T18:27:54Z", "eventName": "DescribeClassicLinkInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ff734967-89cc-4360-b582-a4aa5e30d880", "record_id": "flaws_cloudtrail:0000479:7ff734967-89cc-4360-b582-a4aa5e30d880", "row_index": 479, "timestamp": "2017-03-11T18:27:55Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ff734967-89cc-4360-b582-a4aa5e30d880", "eventTime": "2017-03-11T18:27:55Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "217c40f5-a145-4b8e-9c7e-0147466c4769", "record_id": "flaws_cloudtrail:0000480:217c40f5-a145-4b8e-9c7e-0147466c4769", "row_index": 480, "timestamp": "2017-03-11T18:27:56Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "217c40f5-a145-4b8e-9c7e-0147466c4769", "eventTime": "2017-03-11T18:27:56Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dc3a43d-2d39-4b2e-a800-620b255360db0", "record_id": "flaws_cloudtrail:0000481:7dc3a43d-2d39-4b2e-a800-620b255360db0", "row_index": 481, "timestamp": "2017-03-11T18:27:57Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dc3a43d-2d39-4b2e-a800-620b255360db0", "eventTime": "2017-03-11T18:27:57Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71790ee5-2a4b-457f-913d-c7bee27e9795", "record_id": "flaws_cloudtrail:0000482:71790ee5-2a4b-457f-913d-c7bee27e9795", "row_index": 482, "timestamp": "2017-03-11T18:27:57Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71790ee5-2a4b-457f-913d-c7bee27e9795", "eventTime": "2017-03-11T18:27:57Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acd4250d-25ec-4539-b6b4-e2e11132b80f", "record_id": "flaws_cloudtrail:0000483:acd4250d-25ec-4539-b6b4-e2e11132b80f", "row_index": 483, "timestamp": "2017-03-11T18:27:58Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAITAOY9N1AMMRV4W6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acd4250d-25ec-4539-b6b4-e2e11132b80f", "eventTime": "2017-03-11T18:27:58Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAITAOY9N1AMMRV4W6", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:27:58Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8838c248-e344-4538-a8cd-c901ad492780", "record_id": "flaws_cloudtrail:0000484:8838c248-e344-4538-a8cd-c901ad492780", "row_index": 484, "timestamp": "2017-03-11T18:27:59Z", "event_type": "DescribeHostReservations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8838c248-e344-4538-a8cd-c901ad492780", "eventTime": "2017-03-11T18:27:59Z", "eventName": "DescribeHostReservations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostReservationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "013aa47a-c885-4125-9dbd-77e63e11696f", "record_id": "flaws_cloudtrail:0000485:013aa47a-c885-4125-9dbd-77e63e11696f", "row_index": 485, "timestamp": "2017-03-11T18:28:01Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "013aa47a-c885-4125-9dbd-77e63e11696f", "eventTime": "2017-03-11T18:28:01Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db368932-9155-48a1-b039-bea40f87b56f", "record_id": "flaws_cloudtrail:0000486:db368932-9155-48a1-b039-bea40f87b56f", "row_index": 486, "timestamp": "2017-03-11T18:28:14Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db368932-9155-48a1-b039-bea40f87b56f", "eventTime": "2017-03-11T18:28:14Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bf42c91-6c9b-4dd9-b325-1614b0c6ec8d", "record_id": "flaws_cloudtrail:0000487:3bf42c91-6c9b-4dd9-b325-1614b0c6ec8d", "row_index": 487, "timestamp": "2017-03-11T18:28:56Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA7QMRWEPHLTH4MURY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bf42c91-6c9b-4dd9-b325-1614b0c6ec8d", "eventTime": "2017-03-11T18:28:56Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7QMRWEPHLTH4MURY", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:28:56Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c8391e5-9ed6-4793-a77b-b5352fc1e612", "record_id": "flaws_cloudtrail:0000488:4c8391e5-9ed6-4793-a77b-b5352fc1e612", "row_index": 488, "timestamp": "2017-03-11T18:28:57Z", "event_type": "DescribeImportSnapshotTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAORJ9O25BY7U0VRH2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c8391e5-9ed6-4793-a77b-b5352fc1e612", "eventTime": "2017-03-11T18:28:57Z", "eventName": "DescribeImportSnapshotTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAORJ9O25BY7U0VRH2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:28:57Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036b2fb4-7d22-484a-91ba-04365c5e66e8", "record_id": "flaws_cloudtrail:0000489:036b2fb4-7d22-484a-91ba-04365c5e66e8", "row_index": 489, "timestamp": "2017-03-11T18:28:58Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036b2fb4-7d22-484a-91ba-04365c5e66e8", "eventTime": "2017-03-11T18:28:58Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f1acbcb-a7c3-410e-a669-c5a8bbd3e558", "record_id": "flaws_cloudtrail:0000490:8f1acbcb-a7c3-410e-a669-c5a8bbd3e558", "row_index": 490, "timestamp": "2017-03-11T18:28:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f1acbcb-a7c3-410e-a669-c5a8bbd3e558", "eventTime": "2017-03-11T18:28:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6dfe2d0-e824-4bd3-91f8-e3f9f966456", "record_id": "flaws_cloudtrail:0000491:f6dfe2d0-e824-4bd3-91f8-e3f9f966456", "row_index": 491, "timestamp": "2017-03-11T18:29:00Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6dfe2d0-e824-4bd3-91f8-e3f9f966456", "eventTime": "2017-03-11T18:29:00Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "633853b3-f495-4858-8c42-0ef394eaf479", "record_id": "flaws_cloudtrail:0000492:633853b3-f495-4858-8c42-0ef394eaf479", "row_index": 492, "timestamp": "2017-03-11T18:29:01Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "633853b3-f495-4858-8c42-0ef394eaf479", "eventTime": "2017-03-11T18:29:01Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ed2b997-69cd-4ae6-b9cb-28ba82852935", "record_id": "flaws_cloudtrail:0000493:6ed2b997-69cd-4ae6-b9cb-28ba82852935", "row_index": 493, "timestamp": "2017-03-11T18:29:02Z", "event_type": "DescribeMovingAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAGHV7CWPP6LOFQ98L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ed2b997-69cd-4ae6-b9cb-28ba82852935", "eventTime": "2017-03-11T18:29:02Z", "eventName": "DescribeMovingAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAGHV7CWPP6LOFQ98L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:29:02Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"movingAddressStatusSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e58cfa25-de03-4a3e-a745-b645ab3c7eeb", "record_id": "flaws_cloudtrail:0000494:e58cfa25-de03-4a3e-a745-b645ab3c7eeb", "row_index": 494, "timestamp": "2017-03-11T18:29:03Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e58cfa25-de03-4a3e-a745-b645ab3c7eeb", "eventTime": "2017-03-11T18:29:03Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d567d504-660c-4d7d-aa49-e2a883312c5b", "record_id": "flaws_cloudtrail:0000495:d567d504-660c-4d7d-aa49-e2a883312c5b", "row_index": 495, "timestamp": "2017-03-11T18:29:03Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d567d504-660c-4d7d-aa49-e2a883312c5b", "eventTime": "2017-03-11T18:29:03Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8303f5-dc96-454e-9e5a-8404bacc4057", "record_id": "flaws_cloudtrail:0000496:6e8303f5-dc96-454e-9e5a-8404bacc4057", "row_index": 496, "timestamp": "2017-03-11T18:29:04Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8303f5-dc96-454e-9e5a-8404bacc4057", "eventTime": "2017-03-11T18:29:04Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e5ef55-c57a-4f62-84e1-d48d2b154493e", "record_id": "flaws_cloudtrail:0000497:64e5ef55-c57a-4f62-84e1-d48d2b154493e", "row_index": 497, "timestamp": "2017-03-11T18:29:05Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e5ef55-c57a-4f62-84e1-d48d2b154493e", "eventTime": "2017-03-11T18:29:05Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "470f8a0d-ec72-4413-ad42-2e4446d63db3", "record_id": "flaws_cloudtrail:0000498:470f8a0d-ec72-4413-ad42-2e4446d63db3", "row_index": 498, "timestamp": "2017-03-11T18:29:06Z", "event_type": "DescribeReservedInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "470f8a0d-ec72-4413-ad42-2e4446d63db3", "eventTime": "2017-03-11T18:29:06Z", "eventName": "DescribeReservedInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa37d5f2-655d-4bbe-85ba-872b882fc5b3", "record_id": "flaws_cloudtrail:0000499:fa37d5f2-655d-4bbe-85ba-872b882fc5b3", "row_index": 499, "timestamp": "2017-03-11T18:29:07Z", "event_type": "DescribeReservedInstancesListings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa37d5f2-655d-4bbe-85ba-872b882fc5b3", "eventTime": "2017-03-11T18:29:07Z", "eventName": "DescribeReservedInstancesListings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "Client.OptInRequired", "errorMessage": "AccountId '811596193553', You are not authorized to use the requested product. Please complete the seller registration https://portal.aws.amazon.com/ec2/ri/seller_registration?action=businessInfo.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesListingSet": {}, "reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304e2ce0-4c7e-41e1-9c03-253479f", "record_id": "flaws_cloudtrail:0000500:304e2ce0-4c7e-41e1-9c03-253479f", "row_index": 500, "timestamp": "2017-03-11T18:29:08Z", "event_type": "DescribeReservedInstancesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304e2ce0-4c7e-41e1-9c03-253479f", "eventTime": "2017-03-11T18:29:08Z", "eventName": "DescribeReservedInstancesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesModificationSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c368bc77-1955-4f04-9cc6-1efe7b82da67", "record_id": "flaws_cloudtrail:0000501:c368bc77-1955-4f04-9cc6-1efe7b82da67", "row_index": 501, "timestamp": "2017-03-11T18:29:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c368bc77-1955-4f04-9cc6-1efe7b82da67", "eventTime": "2017-03-11T18:29:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3af45b3f-93a9-4ce1-b5ae-13f7ec94b458", "record_id": "flaws_cloudtrail:0000502:3af45b3f-93a9-4ce1-b5ae-13f7ec94b458", "row_index": 502, "timestamp": "2017-03-11T18:29:10Z", "event_type": "DescribeScheduledInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3af45b3f-93a9-4ce1-b5ae-13f7ec94b458", "eventTime": "2017-03-11T18:29:10Z", "eventName": "DescribeScheduledInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeScheduledInstancesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60b4c09b-2778-4ffb-b922-da8fda63d0a6", "record_id": "flaws_cloudtrail:0000503:60b4c09b-2778-4ffb-b922-da8fda63d0a6", "row_index": 503, "timestamp": "2017-03-11T18:29:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60b4c09b-2778-4ffb-b922-da8fda63d0a6", "eventTime": "2017-03-11T18:29:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd1b2e39-887e-4dd7-b5cd-072c5bf5114c", "record_id": "flaws_cloudtrail:0000504:dd1b2e39-887e-4dd7-b5cd-072c5bf5114c", "row_index": 504, "timestamp": "2017-03-11T18:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd1b2e39-887e-4dd7-b5cd-072c5bf5114c", "eventTime": "2017-03-11T18:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c59ad79-bd72-4467-b837-704580a4964", "record_id": "flaws_cloudtrail:0000505:2c59ad79-bd72-4467-b837-704580a4964", "row_index": 505, "timestamp": "2017-03-11T18:29:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c59ad79-bd72-4467-b837-704580a4964", "eventTime": "2017-03-11T18:29:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzaG9kTlpBb01SSFo2SDNEamhrUmlnbEVjUEI4NVN4NUU3dFp6ZnZzUEpyMFNIcmJLQ1hLSUZ6SkhoVHNpejVZa05GNytSeUxVajZ0ZWpmSyt4cGJHZ2I4SWVTdnBteUQ4MnJPTHk2TkNCcDZWT1oxdlRvdTRsQjZZNVErUlo0WFRKQ0trT1NsejVJY2g2OUpYWm0zQ1RIbFptS0lQM2FSc21wZU10TW1sa2NDS2dDLzlodmZVTXg5ZFB3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b190cf36-550e-4249-91d6-02bf63182bf3", "record_id": "flaws_cloudtrail:0000506:b190cf36-550e-4249-91d6-02bf63182bf3", "row_index": 506, "timestamp": "2017-03-11T18:29:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b190cf36-550e-4249-91d6-02bf63182bf3", "eventTime": "2017-03-11T18:29:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtYW1QdU1oR0JlMkYrdWcwaXlUWER5TGNza2E2dXkwcUcrbVZScmFNRUVjcllpSnlYQ0Nma0w3aGNmWnNzVDU3V1VIYVU3SVdDRzVNMTJXNFVDUEViM2lwZ0l1R1IrVDA0MHFhYlByODFzZE1BNEo5MjN3dWF5MmZCQTdQcjlCdjluRFhsYWJpMm4vUlFDUURsSkFnL3FGNVN4MVZUT29SQ2QrazQyRUhJRm5FalA2Q2dya1kyb2dSIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "055613f85-34ef-4164-8709-6833d36c095c", "record_id": "flaws_cloudtrail:0000507:055613f85-34ef-4164-8709-6833d36c095c", "row_index": 507, "timestamp": "2017-03-11T18:29:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "055613f85-34ef-4164-8709-6833d36c095c", "eventTime": "2017-03-11T18:29:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQ3V5VUg3dTI4WUI1ZDBSaW42UTdhOTVJRm9xb3NxQ21mYjRxUmhKVnJ6clpTZkJqbHVBNyttMjdFMWJJYXk1R2ZvZ1dGZjBKdTVHMkdreDI5VG5yNUs1dTJBb1JQV0FxbksvTjQzc1QrcnhvSngrZUlFMExDeC9CZUtZdUljdUp0bWtPWjlWYlFIaEVGQkNqRkNlZHFsaDZ0Qll2Sy9PSXZ4SFVZNjN3Zk8zWDVSS21nTnd5S1ZJMnFzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe920e6a-9d39-40dc-beb2-a9ff76c15c92", "record_id": "flaws_cloudtrail:0000508:fe920e6a-9d39-40dc-beb2-a9ff76c15c92", "row_index": 508, "timestamp": "2017-03-11T18:29:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe920e6a-9d39-40dc-beb2-a9ff76c15c92", "eventTime": "2017-03-11T18:29:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJueW1kaDQ2N0JDazVvazRzMmNkMWJKRmw0dHBSUEdOZXNnK1dTVitYeTk2dzJvMWd5UGdYeWZiSDNuUXRka0tyQlhHV2RwTnQyVWhLUS9JOW5JanZPaVR5T0NwdVhlT2d2UWlMTkZod3UyWU94ZS9VRWdHNmhnd0pRYk5rcXNhRzZkSHVHRlg0aWJaTVdrUWt3R2tsMTI1Ymd0R012TUxjNjY4VHhtUmZ0UXdyTWdlOFl4em1tZDVXdVFxaDBlMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce655b26-2816-4580-8f28-21ff8776b5a8", "record_id": "flaws_cloudtrail:0000509:ce655b26-2816-4580-8f28-21ff8776b5a8", "row_index": 509, "timestamp": "2017-03-11T18:29:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce655b26-2816-4580-8f28-21ff8776b5a8", "eventTime": "2017-03-11T18:29:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvYkpweTYvT0NBMFpzTzNFeFJVTENwWXRuNm5CTG5zMitLU1drZXMzVGNPSHNWcW9yQzY0K1FxcWttUFZWOFFKQ05sS0xPRDVxWW5Vd3BVTWtnZUtvK0pSWmtyT2xCWm1uRDVOUGFjUHRhcUpOY2oxQXcxSlRHN1FSYmVLN3lZWkNFYlFBcXlwa0p2U0lvM2pmSzBGenFtQzd0ZmxYYjdTdHBxaWphQ1NzVUFwMWVjbFF4R0cwK2ptN0FRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f6804ef-4315-4607-ad6a-15b5c6537bb5", "record_id": "flaws_cloudtrail:0000510:0f6804ef-4315-4607-ad6a-15b5c6537bb5", "row_index": 510, "timestamp": "2017-03-11T18:29:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f6804ef-4315-4607-ad6a-15b5c6537bb5", "eventTime": "2017-03-11T18:29:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsdUhITnZDZEZVdlZhS0x6RW1XZ0pOa0ZsRDQwU3hIRnJ1b0ZsNUZzRGk3NnJNRkJINXdCRXZSL1pCdHRTU0kxa1JETFlDc2puME1NSW0yZ1lhM1k4aXpOWGNaQS9PQWxpbEw1WUdtVzFXWWlsdmt3UlFzVjdLeTlZRXA5bWFKUmg3VkhySGl0K2tWZWVMZG9jSzMxUllEM2VmUVNuN3cycThCUlAzRkZrUEVkT01YOTdCZDhmdHpYa2FvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0d9218-19b2-4122-89bf-91fea5d87ae7", "record_id": "flaws_cloudtrail:0000511:3b0d9218-19b2-4122-89bf-91fea5d87ae7", "row_index": 511, "timestamp": "2017-03-11T18:29:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0d9218-19b2-4122-89bf-91fea5d87ae7", "eventTime": "2017-03-11T18:29:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYL0dwalZkclludEljazQyODVodEtzN2ZjV0tXOEo0dFp6MUF5cjlqb0hKZWNsTytZa0pEZFhQZ1JqNHB4NDFHOUdoaVBjWm9ackFvOUo1bFQxTXdoUHFQNTNaazhtQ0thNjdxaUwrYzcvTkhhV0hqRkVZMXpsUERFR3lZWnVUS0Y1N2RvRTRVRC8xRkVzR3h1Tmp4NVQvU1JmSEw4RTlKYUdISUxYQklmTCs2dWJ5VFU4TXFvTzBqVFlGWSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216f6269-5747-4d97-8415-ffe0a34351f", "record_id": "flaws_cloudtrail:0000512:216f6269-5747-4d97-8415-ffe0a34351f", "row_index": 512, "timestamp": "2017-03-11T18:29:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216f6269-5747-4d97-8415-ffe0a34351f", "eventTime": "2017-03-11T18:29:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxdU9EU013WEZrYkwydm9wbE96VEw4OXloTml2eG1JVTVhcjVkQ29nMzJabGFSMkxmWS83dUFaLzhGZEg2VW8rT2tZMTBXTWt4eG5tTTdBN0Q5ZkZ6MlZ5dldTbVF5b3JlcnNjSUtCb25YYlEwYVBGcHJ2Nnkrc2VsZEJxdGpQOUd5dUtocXVHTTluWkwxZ3JUai9jYUo2SHhjOWNGOVhMYVVXQ1hFeDZlWnRpRHp3OVZ1YW5WM2hqcUhVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36b8f18b-ce17-47b0-b321-b9786c620767d", "record_id": "flaws_cloudtrail:0000513:36b8f18b-ce17-47b0-b321-b9786c620767d", "row_index": 513, "timestamp": "2017-03-11T18:29:28Z", "event_type": "DescribeSpotDatafeedSubscription", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36b8f18b-ce17-47b0-b321-b9786c620767d", "eventTime": "2017-03-11T18:29:28Z", "eventName": "DescribeSpotDatafeedSubscription", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSpotDatafeed.NotFound", "errorMessage": "Spot datafeed subscription does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec45dd9a-d3f1-46da-b29c-94357f21225a", "record_id": "flaws_cloudtrail:0000514:ec45dd9a-d3f1-46da-b29c-94357f21225a", "row_index": 514, "timestamp": "2017-03-11T18:29:29Z", "event_type": "DescribeSpotFleetRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec45dd9a-d3f1-46da-b29c-94357f21225a", "eventTime": "2017-03-11T18:29:29Z", "eventName": "DescribeSpotFleetRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeSpotFleetRequestsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2132b07c-460e-48c2-83c8-8729d76842c", "record_id": "flaws_cloudtrail:0000515:2132b07c-460e-48c2-83c8-8729d76842c", "row_index": 515, "timestamp": "2017-03-11T18:29:30Z", "event_type": "DescribeSpotInstanceRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2132b07c-460e-48c2-83c8-8729d76842c", "eventTime": "2017-03-11T18:29:30Z", "eventName": "DescribeSpotInstanceRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"spotInstanceRequestIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb38c01-d617-40da-914a-d422a80d075e", "record_id": "flaws_cloudtrail:0000516:ffb38c01-d617-40da-914a-d422a80d075e", "row_index": 516, "timestamp": "2017-03-11T18:29:31Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb38c01-d617-40da-914a-d422a80d075e", "eventTime": "2017-03-11T18:29:31Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ffa7486-afd4-4820-b5bc-605e8f279976", "record_id": "flaws_cloudtrail:0000517:9ffa7486-afd4-4820-b5bc-605e8f279976", "row_index": 517, "timestamp": "2017-03-11T18:29:31Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ffa7486-afd4-4820-b5bc-605e8f279976", "eventTime": "2017-03-11T18:29:31Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab8368e-5ad9-4d92-a8a7-3c9d7291ee02", "record_id": "flaws_cloudtrail:0000518:6ab8368e-5ad9-4d92-a8a7-3c9d7291ee02", "row_index": 518, "timestamp": "2017-03-11T18:29:32Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab8368e-5ad9-4d92-a8a7-3c9d7291ee02", "eventTime": "2017-03-11T18:29:32Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a65d8d-5e7e-459e-aeee-87526ebbea95", "record_id": "flaws_cloudtrail:0000519:48a65d8d-5e7e-459e-aeee-87526ebbea95", "row_index": 519, "timestamp": "2017-03-11T18:29:33Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a65d8d-5e7e-459e-aeee-87526ebbea95", "eventTime": "2017-03-11T18:29:33Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c81d5e39-eacf-46fe-b714-7171f7684b95", "record_id": "flaws_cloudtrail:0000520:c81d5e39-eacf-46fe-b714-7171f7684b95", "row_index": 520, "timestamp": "2017-03-11T18:29:34Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c81d5e39-eacf-46fe-b714-7171f7684b95", "eventTime": "2017-03-11T18:29:34Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f69e72f6-2f33-4930-8c74-56280b21e54b", "record_id": "flaws_cloudtrail:0000521:f69e72f6-2f33-4930-8c74-56280b21e54b", "row_index": 521, "timestamp": "2017-03-11T18:29:35Z", "event_type": "DescribeVpcClassicLinkDnsSupport", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f69e72f6-2f33-4930-8c74-56280b21e54b", "eventTime": "2017-03-11T18:29:35Z", "eventName": "DescribeVpcClassicLinkDnsSupport", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcClassicLinkDnsSupportRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c6960c8-e71e-449b-87b1-e97be708df8d", "record_id": "flaws_cloudtrail:0000522:0c6960c8-e71e-449b-87b1-e97be708df8d", "row_index": 522, "timestamp": "2017-03-11T18:29:36Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAMAOKWSEKFPIPU03H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c6960c8-e71e-449b-87b1-e97be708df8d", "eventTime": "2017-03-11T18:29:36Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMAOKWSEKFPIPU03H", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:29:35Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b23456-fd91-4984-88fd-0fd90c4e5f0b", "record_id": "flaws_cloudtrail:0000523:c6b23456-fd91-4984-88fd-0fd90c4e5f0b", "row_index": 523, "timestamp": "2017-03-11T18:29:36Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b23456-fd91-4984-88fd-0fd90c4e5f0b", "eventTime": "2017-03-11T18:29:36Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a1ad05-dc5f-418a-9cf4-cfc32d900823", "record_id": "flaws_cloudtrail:0000524:d4a1ad05-dc5f-418a-9cf4-cfc32d900823", "row_index": 524, "timestamp": "2017-03-11T18:29:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a1ad05-dc5f-418a-9cf4-cfc32d900823", "eventTime": "2017-03-11T18:29:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88fcb583-42bc-4143-9a8d-c52af6b80d77", "record_id": "flaws_cloudtrail:0000525:88fcb583-42bc-4143-9a8d-c52af6b80d77", "row_index": 525, "timestamp": "2017-03-11T18:29:38Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88fcb583-42bc-4143-9a8d-c52af6b80d77", "eventTime": "2017-03-11T18:29:38Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fba127fa-7a82-400f-b4dc-479b7b5fd7a1", "record_id": "flaws_cloudtrail:0000526:fba127fa-7a82-400f-b4dc-479b7b5fd7a1", "row_index": 526, "timestamp": "2017-03-11T18:29:39Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fba127fa-7a82-400f-b4dc-479b7b5fd7a1", "eventTime": "2017-03-11T18:29:39Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133d4665-8a10-4861-82b9-fb1d409ba528", "record_id": "flaws_cloudtrail:0000527:133d4665-8a10-4861-82b9-fb1d409ba528", "row_index": 527, "timestamp": "2017-03-11T18:29:40Z", "event_type": "DescribeCases", "event_source": "support.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133d4665-8a10-4861-82b9-fb1d409ba528", "eventTime": "2017-03-11T18:29:40Z", "eventName": "DescribeCases", "eventSource": "support.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: support:", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18a48795-dfcd-478d-80d6-1b680447b416", "record_id": "flaws_cloudtrail:0000528:18a48795-dfcd-478d-80d6-1b680447b416", "row_index": 528, "timestamp": "2017-03-11T18:29:41Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18a48795-dfcd-478d-80d6-1b680447b416", "eventTime": "2017-03-11T18:29:41Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87ce9325-a38b-4790-a438-be200834fa7", "record_id": "flaws_cloudtrail:0000529:87ce9325-a38b-4790-a438-be200834fa7", "row_index": 529, "timestamp": "2017-03-11T18:29:42Z", "event_type": "DescribeInterconnects", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87ce9325-a38b-4790-a438-be200834fa7", "eventTime": "2017-03-11T18:29:42Z", "eventName": "DescribeInterconnects", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "DirectConnectClientException", "errorMessage": "Account 811596193553 is not an authorized Direct Connect partner.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b928435c-a792-4b76-b4a9-6377cf55d3e8", "record_id": "flaws_cloudtrail:0000530:5b928435c-a792-4b76-b4a9-6377cf55d3e8", "row_index": 530, "timestamp": "2017-03-11T18:29:43Z", "event_type": "DescribeVirtualInterfaces", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b928435c-a792-4b76-b4a9-6377cf55d3e8", "eventTime": "2017-03-11T18:29:43Z", "eventName": "DescribeVirtualInterfaces", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d832f591-24cd-4792-8384-b93419bd", "record_id": "flaws_cloudtrail:0000531:d832f591-24cd-4792-8384-b93419bd", "row_index": 531, "timestamp": "2017-03-11T18:29:43Z", "event_type": "DescribeVirtualGateways", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d832f591-24cd-4792-8384-b93419bd", "eventTime": "2017-03-11T18:29:43Z", "eventName": "DescribeVirtualGateways", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a731f77f-d172-4b07-9029-c5ba0f8ed2ca", "record_id": "flaws_cloudtrail:0000532:a731f77f-d172-4b07-9029-c5ba0f8ed2ca", "row_index": 532, "timestamp": "2017-03-11T18:29:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a731f77f-d172-4b07-9029-c5ba0f8ed2ca", "eventTime": "2017-03-11T18:29:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b92f9209-2d9a-4c53-abc1-9601d357573", "record_id": "flaws_cloudtrail:0000533:b92f9209-2d9a-4c53-abc1-9601d357573", "row_index": 533, "timestamp": "2017-03-11T18:29:45Z", "event_type": "ListPublicKeys", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b92f9209-2d9a-4c53-abc1-9601d357573", "eventTime": "2017-03-11T18:29:45Z", "eventName": "ListPublicKeys", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:ListPublicKeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f499224-f74f-448f-8ce3-df4ed0baa0e2", "record_id": "flaws_cloudtrail:0000534:9f499224-f74f-448f-8ce3-df4ed0baa0e2", "row_index": 534, "timestamp": "2017-03-11T18:29:46Z", "event_type": "DescribeAccountLimits", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f499224-f74f-448f-8ce3-df4ed0baa0e2", "eventTime": "2017-03-11T18:29:46Z", "eventName": "DescribeAccountLimits", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudformation:DescribeAccountLimits", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79715-7a17-45b1-b004-2ced1774d3a8", "record_id": "flaws_cloudtrail:0000535:79715-7a17-45b1-b004-2ced1774d3a8", "row_index": 535, "timestamp": "2017-03-11T18:29:47Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79715-7a17-45b1-b004-2ced1774d3a8", "eventTime": "2017-03-11T18:29:47Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa600aee-ecd4-4317-8cc3-5920aba45fee", "record_id": "flaws_cloudtrail:0000536:fa600aee-ecd4-4317-8cc3-5920aba45fee", "row_index": 536, "timestamp": "2017-03-11T18:29:47Z", "event_type": "ListExports", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa600aee-ecd4-4317-8cc3-5920aba45fee", "eventTime": "2017-03-11T18:29:47Z", "eventName": "ListExports", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudformation:ListExports", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac306a8c-7402-4fe2-8ff0-36857a8a71a3", "record_id": "flaws_cloudtrail:0000537:ac306a8c-7402-4fe2-8ff0-36857a8a71a3", "row_index": 537, "timestamp": "2017-03-11T18:29:48Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac306a8c-7402-4fe2-8ff0-36857a8a71a3", "eventTime": "2017-03-11T18:29:48Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6dce702-7363-4760-b07b-54f06f7545b3", "record_id": "flaws_cloudtrail:0000538:f6dce702-7363-4760-b07b-54f06f7545b3", "row_index": 538, "timestamp": "2017-03-11T18:32:30Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6dce702-7363-4760-b07b-54f06f7545b3", "eventTime": "2017-03-11T18:32:30Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3a2107e-da4e-40e1-a0d5-b2d39f49d539", "record_id": "flaws_cloudtrail:0000539:a3a2107e-da4e-40e1-a0d5-b2d39f49d539", "row_index": 539, "timestamp": "2017-03-11T18:32:31Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3a2107e-da4e-40e1-a0d5-b2d39f49d539", "eventTime": "2017-03-11T18:32:31Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c83fccd9-52c1-4197-a0a2-d529843a0", "record_id": "flaws_cloudtrail:0000540:c83fccd9-52c1-4197-a0a2-d529843a0", "row_index": 540, "timestamp": "2017-03-11T18:32:32Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c83fccd9-52c1-4197-a0a2-d529843a0", "eventTime": "2017-03-11T18:32:32Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0769af23-bf4c-4fb6-8a1d-44a9674a96ed", "record_id": "flaws_cloudtrail:0000541:0769af23-bf4c-4fb6-8a1d-44a9674a96ed", "row_index": 541, "timestamp": "2017-03-11T18:32:33Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0769af23-bf4c-4fb6-8a1d-44a9674a96ed", "eventTime": "2017-03-11T18:32:33Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ee742e8-eada-4cc5-bc01-2a0aed9c6514", "record_id": "flaws_cloudtrail:0000542:5ee742e8-eada-4cc5-bc01-2a0aed9c6514", "row_index": 542, "timestamp": "2017-03-11T18:32:33Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ee742e8-eada-4cc5-bc01-2a0aed9c6514", "eventTime": "2017-03-11T18:32:33Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d729bfe-8414-4efb-8c50-44501c85eb", "record_id": "flaws_cloudtrail:0000543:2d729bfe-8414-4efb-8c50-44501c85eb", "row_index": 543, "timestamp": "2017-03-11T18:32:34Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d729bfe-8414-4efb-8c50-44501c85eb", "eventTime": "2017-03-11T18:32:34Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ecdd64-651a-4599-9310-bea9ca46f2ca", "record_id": "flaws_cloudtrail:0000544:68ecdd64-651a-4599-9310-bea9ca46f2ca", "row_index": 544, "timestamp": "2017-03-11T18:32:35Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ecdd64-651a-4599-9310-bea9ca46f2ca", "eventTime": "2017-03-11T18:32:35Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d9e010-2874-42d5-8d0c-d39efd31d504", "record_id": "flaws_cloudtrail:0000545:e5d9e010-2874-42d5-8d0c-d39efd31d504", "row_index": 545, "timestamp": "2017-03-11T18:32:35Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d9e010-2874-42d5-8d0c-d39efd31d504", "eventTime": "2017-03-11T18:32:35Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABhAuerFPmv0eUyMQs8Adk9eMM0KseCatajzjjmsEWmZ78PJVSSCLrJc0dwKyR15CRDwkIxNyf3TyPp97V2kQLPJZ2ERBSBHe5lxMnlYyOxNew==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddba6c25-82b3-408f-b516-bacdb42f9538", "record_id": "flaws_cloudtrail:0000546:ddba6c25-82b3-408f-b516-bacdb42f9538", "row_index": 546, "timestamp": "2017-03-11T18:32:35Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddba6c25-82b3-408f-b516-bacdb42f9538", "eventTime": "2017-03-11T18:32:35Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee22c600-120a-49ba-95c7-2c5adf551cb8", "record_id": "flaws_cloudtrail:0000547:ee22c600-120a-49ba-95c7-2c5adf551cb8", "row_index": 547, "timestamp": "2017-03-11T18:32:36Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee22c600-120a-49ba-95c7-2c5adf551cb8", "eventTime": "2017-03-11T18:32:36Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "375871ac8-0655-4989-8bff-57d1182807c8", "record_id": "flaws_cloudtrail:0000548:375871ac8-0655-4989-8bff-57d1182807c8", "row_index": 548, "timestamp": "2017-03-11T18:32:36Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "375871ac8-0655-4989-8bff-57d1182807c8", "eventTime": "2017-03-11T18:32:36Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACiYxmv3eNbhePkSkICyuX+6Xg8VSYapmdw1U9InlVfYYUmLK7RqEtAuAcpA578E+eKAOn9fHGFtqsIRSVMsg5o4eiB18IEbOuy9FqbaCTwpxw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cbd5ce8-9d9a-485b-9370-52234c8ebcd7", "record_id": "flaws_cloudtrail:0000549:9cbd5ce8-9d9a-485b-9370-52234c8ebcd7", "row_index": 549, "timestamp": "2017-03-11T18:32:37Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cbd5ce8-9d9a-485b-9370-52234c8ebcd7", "eventTime": "2017-03-11T18:32:37Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f61a7311-baeb-41fb-89a6-f679d934952a5", "record_id": "flaws_cloudtrail:0000550:f61a7311-baeb-41fb-89a6-f679d934952a5", "row_index": 550, "timestamp": "2017-03-11T18:32:38Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f61a7311-baeb-41fb-89a6-f679d934952a5", "eventTime": "2017-03-11T18:32:38Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54b22d6-23a1-4aba-8731-4ab72fb641518", "record_id": "flaws_cloudtrail:0000551:d54b22d6-23a1-4aba-8731-4ab72fb641518", "row_index": 551, "timestamp": "2017-03-11T18:32:39Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54b22d6-23a1-4aba-8731-4ab72fb641518", "eventTime": "2017-03-11T18:32:39Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2031b92a-fe82-405b-86b7-186e839911ba", "record_id": "flaws_cloudtrail:0000552:2031b92a-fe82-405b-86b7-186e839911ba", "row_index": 552, "timestamp": "2017-03-11T18:32:39Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2031b92a-fe82-405b-86b7-186e839911ba", "eventTime": "2017-03-11T18:32:39Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb8e086-537b-4881-9027-edee2703aea3", "record_id": "flaws_cloudtrail:0000553:1eb8e086-537b-4881-9027-edee2703aea3", "row_index": 553, "timestamp": "2017-03-11T18:32:40Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb8e086-537b-4881-9027-edee2703aea3", "eventTime": "2017-03-11T18:32:40Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "CredentialReportNotPresentException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13674ec5-d13f-4957-8ce2-576dca9fe21e", "record_id": "flaws_cloudtrail:0000554:13674ec5-d13f-4957-8ce2-576dca9fe21e", "row_index": 554, "timestamp": "2017-03-11T18:32:41Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13674ec5-d13f-4957-8ce2-576dca9fe21e", "eventTime": "2017-03-11T18:32:41Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5ef1bf0-d69e-4a68-bb26-af9e6d5d3ee6", "record_id": "flaws_cloudtrail:0000555:a5ef1bf0-d69e-4a68-bb26-af9e6d5d3ee6", "row_index": 555, "timestamp": "2017-03-11T18:32:42Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5ef1bf0-d69e-4a68-bb26-af9e6d5d3ee6", "eventTime": "2017-03-11T18:32:42Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "376f5889-1d04-4e10-8ed3-b4c5347d8677", "record_id": "flaws_cloudtrail:0000556:376f5889-1d04-4e10-8ed3-b4c5347d8677", "row_index": 556, "timestamp": "2017-03-11T18:32:43Z", "event_type": "DescribeClassicLinkInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "376f5889-1d04-4e10-8ed3-b4c5347d8677", "eventTime": "2017-03-11T18:32:43Z", "eventName": "DescribeClassicLinkInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24a049363-e95e-416b-b48f-e9a97ecaf440", "record_id": "flaws_cloudtrail:0000557:24a049363-e95e-416b-b48f-e9a97ecaf440", "row_index": 557, "timestamp": "2017-03-11T18:32:43Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24a049363-e95e-416b-b48f-e9a97ecaf440", "eventTime": "2017-03-11T18:32:43Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb9899fd-409a-40f7-95c9-1a3030db7239", "record_id": "flaws_cloudtrail:0000558:bb9899fd-409a-40f7-95c9-1a3030db7239", "row_index": 558, "timestamp": "2017-03-11T18:32:44Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb9899fd-409a-40f7-95c9-1a3030db7239", "eventTime": "2017-03-11T18:32:44Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79faf4d1-8dde-41fe-a9f8-74dbe8dab8f9", "record_id": "flaws_cloudtrail:0000559:79faf4d1-8dde-41fe-a9f8-74dbe8dab8f9", "row_index": 559, "timestamp": "2017-03-11T18:32:45Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79faf4d1-8dde-41fe-a9f8-74dbe8dab8f9", "eventTime": "2017-03-11T18:32:45Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dc94b22-fbe2-44ff-ac10-5bae63087da", "record_id": "flaws_cloudtrail:0000560:9dc94b22-fbe2-44ff-ac10-5bae63087da", "row_index": 560, "timestamp": "2017-03-11T18:32:46Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dc94b22-fbe2-44ff-ac10-5bae63087da", "eventTime": "2017-03-11T18:32:46Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c785e88-9ad4-4ac3-9158-a26c836bccc5", "record_id": "flaws_cloudtrail:0000561:7c785e88-9ad4-4ac3-9158-a26c836bccc5", "row_index": 561, "timestamp": "2017-03-11T18:32:47Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAE68X0P9ND3PR2VXH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c785e88-9ad4-4ac3-9158-a26c836bccc5", "eventTime": "2017-03-11T18:32:47Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAE68X0P9ND3PR2VXH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:27:55Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f67f1765-8776-4482-9394-36b0e1331a6d", "record_id": "flaws_cloudtrail:0000562:f67f1765-8776-4482-9394-36b0e1331a6d", "row_index": 562, "timestamp": "2017-03-11T18:32:47Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f67f1765-8776-4482-9394-36b0e1331a6d", "eventTime": "2017-03-11T18:32:47Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8ff7310-6adc-461a-826f-3c899387df55", "record_id": "flaws_cloudtrail:0000563:a8ff7310-6adc-461a-826f-3c899387df55", "row_index": 563, "timestamp": "2017-03-11T18:32:48Z", "event_type": "DescribeHostReservations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8ff7310-6adc-461a-826f-3c899387df55", "eventTime": "2017-03-11T18:32:48Z", "eventName": "DescribeHostReservations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostReservationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b68448-f47a-46f2-9f37-167262d14", "record_id": "flaws_cloudtrail:0000564:b68448-f47a-46f2-9f37-167262d14", "row_index": 564, "timestamp": "2017-03-11T18:32:49Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b68448-f47a-46f2-9f37-167262d14", "eventTime": "2017-03-11T18:32:49Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e499cc8e-0533-49f4-9d76-42300ea6ab", "record_id": "flaws_cloudtrail:0000565:e499cc8e-0533-49f4-9d76-42300ea6ab", "row_index": 565, "timestamp": "2017-03-11T18:32:59Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e499cc8e-0533-49f4-9d76-42300ea6ab", "eventTime": "2017-03-11T18:32:59Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f66beefc-218a-447d-9d9e-ceeeee730b5d", "record_id": "flaws_cloudtrail:0000566:f66beefc-218a-447d-9d9e-ceeeee730b5d", "row_index": 566, "timestamp": "2017-03-11T18:32:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f66beefc-218a-447d-9d9e-ceeeee730b5d", "eventTime": "2017-03-11T18:32:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ3XS7Q8KS2WYB6FK", "expiration": "Mar 12, 2017 12:52:40 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19340-3320-47dc-93c0-e9a92eb38dab", "record_id": "flaws_cloudtrail:0000567:19340-3320-47dc-93c0-e9a92eb38dab", "row_index": 567, "timestamp": "2017-03-11T18:36:06Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAAOQGNU7ASOIWC2HE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19340-3320-47dc-93c0-e9a92eb38dab", "eventTime": "2017-03-11T18:36:06Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAOQGNU7ASOIWC2HE", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:36:06Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab6d809-5dd0-4ace-8243-616056d4505e", "record_id": "flaws_cloudtrail:0000568:1ab6d809-5dd0-4ace-8243-616056d4505e", "row_index": 568, "timestamp": "2017-03-11T18:36:07Z", "event_type": "DescribeImportSnapshotTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA2XSZTPUQOKC6WAGQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab6d809-5dd0-4ace-8243-616056d4505e", "eventTime": "2017-03-11T18:36:07Z", "eventName": "DescribeImportSnapshotTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA2XSZTPUQOKC6WAGQ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:36:06Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e140284c2-6f1a-4f89-b962-fd1de20d862e", "record_id": "flaws_cloudtrail:0000569:e140284c2-6f1a-4f89-b962-fd1de20d862e", "row_index": 569, "timestamp": "2017-03-11T18:36:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e140284c2-6f1a-4f89-b962-fd1de20d862e", "eventTime": "2017-03-11T18:36:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b3d6ee1-fcba-42da-a03f-46930a200729", "record_id": "flaws_cloudtrail:0000570:6b3d6ee1-fcba-42da-a03f-46930a200729", "row_index": 570, "timestamp": "2017-03-11T18:36:08Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b3d6ee1-fcba-42da-a03f-46930a200729", "eventTime": "2017-03-11T18:36:08Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf19f80c-f104-4385-907a-c71161ebdd3a", "record_id": "flaws_cloudtrail:0000571:cf19f80c-f104-4385-907a-c71161ebdd3a", "row_index": 571, "timestamp": "2017-03-11T18:36:09Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf19f80c-f104-4385-907a-c71161ebdd3a", "eventTime": "2017-03-11T18:36:09Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f91405-9d27-4fc0-ad27-25046ba0b562", "record_id": "flaws_cloudtrail:0000572:3f91405-9d27-4fc0-ad27-25046ba0b562", "row_index": 572, "timestamp": "2017-03-11T18:36:10Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f91405-9d27-4fc0-ad27-25046ba0b562", "eventTime": "2017-03-11T18:36:10Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "903a3407-7f06-4538-aa87-d2fec66926c", "record_id": "flaws_cloudtrail:0000573:903a3407-7f06-4538-aa87-d2fec66926c", "row_index": 573, "timestamp": "2017-03-11T18:36:11Z", "event_type": "DescribeMovingAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIARTHP6ON4V73AO2C5", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "903a3407-7f06-4538-aa87-d2fec66926c", "eventTime": "2017-03-11T18:36:11Z", "eventName": "DescribeMovingAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIARTHP6ON4V73AO2C5", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:36:11Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"movingAddressStatusSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3b7326f-4f92-42c0-baa8-41e7f2e4ec1d", "record_id": "flaws_cloudtrail:0000574:a3b7326f-4f92-42c0-baa8-41e7f2e4ec1d", "row_index": 574, "timestamp": "2017-03-11T18:36:12Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3b7326f-4f92-42c0-baa8-41e7f2e4ec1d", "eventTime": "2017-03-11T18:36:12Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a389b947-8ba1-46e2-9972-92419a8e8341", "record_id": "flaws_cloudtrail:0000575:a389b947-8ba1-46e2-9972-92419a8e8341", "row_index": 575, "timestamp": "2017-03-11T18:36:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a389b947-8ba1-46e2-9972-92419a8e8341", "eventTime": "2017-03-11T18:36:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75313f-1c84-43a5-91e0-19b1ba48fb4d", "record_id": "flaws_cloudtrail:0000576:75313f-1c84-43a5-91e0-19b1ba48fb4d", "row_index": 576, "timestamp": "2017-03-11T18:36:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75313f-1c84-43a5-91e0-19b1ba48fb4d", "eventTime": "2017-03-11T18:36:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff8d35c-1c2b-440c-ae90-ebf8b2e142562", "record_id": "flaws_cloudtrail:0000577:cff8d35c-1c2b-440c-ae90-ebf8b2e142562", "row_index": 577, "timestamp": "2017-03-11T18:36:15Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff8d35c-1c2b-440c-ae90-ebf8b2e142562", "eventTime": "2017-03-11T18:36:15Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33798-f45f-450a-9636-096e49b77f02", "record_id": "flaws_cloudtrail:0000578:33798-f45f-450a-9636-096e49b77f02", "row_index": 578, "timestamp": "2017-03-11T18:36:16Z", "event_type": "DescribeReservedInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33798-f45f-450a-9636-096e49b77f02", "eventTime": "2017-03-11T18:36:16Z", "eventName": "DescribeReservedInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e2c13d2-4ba9-4a9c-89f1-d411c22813a", "record_id": "flaws_cloudtrail:0000579:3e2c13d2-4ba9-4a9c-89f1-d411c22813a", "row_index": 579, "timestamp": "2017-03-11T18:36:17Z", "event_type": "DescribeReservedInstancesListings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e2c13d2-4ba9-4a9c-89f1-d411c22813a", "eventTime": "2017-03-11T18:36:17Z", "eventName": "DescribeReservedInstancesListings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "Client.OptInRequired", "errorMessage": "AccountId '811596193553', You are not authorized to use the requested product. Please complete the seller registration https://portal.aws.amazon.com/ec2/ri/seller_registration?action=businessInfo.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesListingSet": {}, "reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeeb450e-ea12-4998-9556-b488c8032c15", "record_id": "flaws_cloudtrail:0000580:eeeb450e-ea12-4998-9556-b488c8032c15", "row_index": 580, "timestamp": "2017-03-11T18:36:18Z", "event_type": "DescribeReservedInstancesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeeb450e-ea12-4998-9556-b488c8032c15", "eventTime": "2017-03-11T18:36:18Z", "eventName": "DescribeReservedInstancesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesModificationSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b36098-6932-4983-8bfd-c11cf5d249ca", "record_id": "flaws_cloudtrail:0000581:04b36098-6932-4983-8bfd-c11cf5d249ca", "row_index": 581, "timestamp": "2017-03-11T18:36:19Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b36098-6932-4983-8bfd-c11cf5d249ca", "eventTime": "2017-03-11T18:36:19Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22b857c3-ed16-4072-bf93-6c16faf28923", "record_id": "flaws_cloudtrail:0000582:22b857c3-ed16-4072-bf93-6c16faf28923", "row_index": 582, "timestamp": "2017-03-11T18:36:20Z", "event_type": "DescribeScheduledInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22b857c3-ed16-4072-bf93-6c16faf28923", "eventTime": "2017-03-11T18:36:20Z", "eventName": "DescribeScheduledInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeScheduledInstancesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44055e5-43aa-4d8b-8f94-bc0603fb7b73", "record_id": "flaws_cloudtrail:0000583:44055e5-43aa-4d8b-8f94-bc0603fb7b73", "row_index": 583, "timestamp": "2017-03-11T18:36:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44055e5-43aa-4d8b-8f94-bc0603fb7b73", "eventTime": "2017-03-11T18:36:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea248578-30ef-4dab-8688-441771a7b4c", "record_id": "flaws_cloudtrail:0000584:ea248578-30ef-4dab-8688-441771a7b4c", "row_index": 584, "timestamp": "2017-03-11T18:36:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea248578-30ef-4dab-8688-441771a7b4c", "eventTime": "2017-03-11T18:36:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "047222f7-c0c7-46c7-a13e-78864ff4dc38", "record_id": "flaws_cloudtrail:0000585:047222f7-c0c7-46c7-a13e-78864ff4dc38", "row_index": 585, "timestamp": "2017-03-11T18:36:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "047222f7-c0c7-46c7-a13e-78864ff4dc38", "eventTime": "2017-03-11T18:36:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRdUY3aC96UXhQeHlieERQVlpTTjRTREZZNG9kQ3BwTHZlU0EvWXhzZTlGbHl1VUhDNGN5ZnNCTFRqbUxTNlVqUGk0MjczcmhWYXBBc1VZMkNyV3VOZWkvcUxQUjFUVUJhUERoT3pBR2w4MWlmcXpOWE9NNVR0VXVRWUdJdGhUTU1ja3JteGdPcEVnUS8yMUpHU2tMUGNLRGJZcDdxTXhtck9tb1IyMDY5S2ExTS9NVnNodzA4ZWV2UnJrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0390dde0-1039-4e3d-8bc6-18e32feeb03e", "record_id": "flaws_cloudtrail:0000586:0390dde0-1039-4e3d-8bc6-18e32feeb03e", "row_index": 586, "timestamp": "2017-03-11T18:36:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0390dde0-1039-4e3d-8bc6-18e32feeb03e", "eventTime": "2017-03-11T18:36:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrWlc3ZjVhZXNGd0gyWENacERSTk1vdVVhZkNtZStnc3k2UDJRWUZnYVB4cDNyY0VpMUpuTzUrRHlOUXZ4TzBXeFUvTUh1UEtzbGhCNTEzSzFUaVRSZHVWcitib2d6T1pNaW9tTktjaENTS3NxVVVVL0lEU1VlTDBqaGQwdStHczE1WEpaMnNnK1pyL1h3dHpVNXpqenN5Z21tY0pHai9XOWRrS0lubEFkeWkrU1JBTEpuaWpzUGx6IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a6c70d9-7982-467d-9813-113ff4f2ad44", "record_id": "flaws_cloudtrail:0000587:6a6c70d9-7982-467d-9813-113ff4f2ad44", "row_index": 587, "timestamp": "2017-03-11T18:36:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a6c70d9-7982-467d-9813-113ff4f2ad44", "eventTime": "2017-03-11T18:36:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQU2t4Wk9uYVZpeU4xTllSK2d1bStRVDhmdHRtVkw1RGlpckNwTWNZTFZ0NmRpclpQeFZTaTlXM1E0NnpGZjVrMEF5ZkhxamZxa1FCYXBiVjM3MGQySTJLamFQdy9pMG8zaVZ6UTJMVXIwR2lGYnlGZ1lRUnRlUk9LaVgraGp3ekhEOGV4RUVMM05EUTM1dENzRkpVSWNOV093ODkyL280VTJZMjhFUzF5OEo3RmZGWitOL3U0NjlVYURVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0191c5fe-bc57-4fb7-9eda-8f9636874521", "record_id": "flaws_cloudtrail:0000588:0191c5fe-bc57-4fb7-9eda-8f9636874521", "row_index": 588, "timestamp": "2017-03-11T18:36:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0191c5fe-bc57-4fb7-9eda-8f9636874521", "eventTime": "2017-03-11T18:36:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2clM1bnZ3ZEVTMThuTitFYmNaNDRLSmcyUUtEeHREdDlORGMwK0tDa01IY1FsZllUMHV4aFJnbXpSNEFDREpUaUx2UTFKVldNVFNJaEFNWncvMFl4eTBwVVQ1R0VBWlRRbk84UnFxcnVLemJ6SWRmYm5kNm1od2VBbk1EaFJHM251OUVWdXRIWk5PbHhQVERIUk8xdXJzcjltbmtEWEpmRG9Sc1cvcXl4V2ZNUzJkc01iWTJBamlXSEd4U3B3TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc4c9d6-296e-4941-a9d9-507dc7b7b878", "record_id": "flaws_cloudtrail:0000589:7bc4c9d6-296e-4941-a9d9-507dc7b7b878", "row_index": 589, "timestamp": "2017-03-11T18:36:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc4c9d6-296e-4941-a9d9-507dc7b7b878", "eventTime": "2017-03-11T18:36:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNYWlMMjdITnRuQmZPRDBQWTc4MFV5UUgzM0l0VFVxNWNRSTgvYnRSVzJZZnJDY1BmeUF1OXk5ZE83VVNWSkc0Rit3bjVlelZvalZEZHREdWloZEkvUk1oU3pQdUptRGkvVFBvTHIrTTZYS1NTSUNUdVljOWhSLytKU2g3YnpVNjF1d1RGQUhqSEw4WVVFR2ZHZGgwMnBhb0YyNTFHRmxNbmZ4Slc2QmtvWHZEeUZzSVpsOU96dUtIcExJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e06642f-3543-4434-b854-b1b678ad14ab", "record_id": "flaws_cloudtrail:0000590:2e06642f-3543-4434-b854-b1b678ad14ab", "row_index": 590, "timestamp": "2017-03-11T18:36:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e06642f-3543-4434-b854-b1b678ad14ab", "eventTime": "2017-03-11T18:36:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSK3UwZVlGeit2a1lEVjhuWjh0OTFMMkhMa0NOQ1htTS9VeGxrcUtUdnlpaFNsY0w1MDkzREwvazRja292UE9aak85U0JRVjVTcGhldEYva0pvWWJZdGtzU2dsblhiTnhQd3FnWlRGbXpSYk5ZUGoySHZYQ25ka1FQbmhmbkJ6M05EVlNMUE43SHlVaUhpSkg3bnZsVmZldmU1MDk2a1ZFdjM1LzczZndoNEVWeUpkTXl2c3UvVEw3L1VjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b1db1a-0f5b-4585-bd23-e6b17714be02", "record_id": "flaws_cloudtrail:0000591:57b1db1a-0f5b-4585-bd23-e6b17714be02", "row_index": 591, "timestamp": "2017-03-11T18:36:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b1db1a-0f5b-4585-bd23-e6b17714be02", "eventTime": "2017-03-11T18:36:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsSGlmWjlhRGZzODE4QTFPRDRpSm1PdDZ0YW1iWS9RL3d3ZmhwdklFMEZCa3kwTzFPb3k1bm13eXNVMmVIdGV3RGQ5RXIrQVJZSEZkYTZKTXdyRTJPK1pIcFpwM21PQUlVaUk4a3ozSHpXZXJIZVFhaSt6dFVkVUZTM2Z6L0M1ZkhrVmxndDRXV3dXMkxtZytneDNGSVp0Y3R2dWtrOTZkVVhMMVdnT09NNjlBM0svMVRHejFvRXJFS0tPYyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404d9a68-2d6d-412a-87eb-4c02705345af", "record_id": "flaws_cloudtrail:0000592:404d9a68-2d6d-412a-87eb-4c02705345af", "row_index": 592, "timestamp": "2017-03-11T18:36:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404d9a68-2d6d-412a-87eb-4c02705345af", "eventTime": "2017-03-11T18:36:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUUFlucUMzUnVmZENBUzFmSHk0NWNobTdDbTV0azJtY0YwTkthRFZVTmhoYnZkOUZpL0paYVdBNTlHWG5YUFo3ZFlHTVc2VGNmMHZWRS9KTXAwOEwzaTBKb013MGJPRzJtL3REcGlhb3cxSFJtUUczYWFNeW1kaW85ZVlFUVEwajFVN0pjK3FrN0JZVVA5RHpSWlFaK200bHlhSTl1UHVUOERwQnNHa0RHS2dDTzVac1pmcnNrQnVBVU9JPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5fb7bd6-2e4e-4b5a-a608-4da4b27ba078", "record_id": "flaws_cloudtrail:0000593:e5fb7bd6-2e4e-4b5a-a608-4da4b27ba078", "row_index": 593, "timestamp": "2017-03-11T18:36:43Z", "event_type": "DescribeSpotDatafeedSubscription", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5fb7bd6-2e4e-4b5a-a608-4da4b27ba078", "eventTime": "2017-03-11T18:36:43Z", "eventName": "DescribeSpotDatafeedSubscription", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSpotDatafeed.NotFound", "errorMessage": "Spot datafeed subscription does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57ee0625-439e-4adb-bbc8-a8735ce906ff", "record_id": "flaws_cloudtrail:0000594:57ee0625-439e-4adb-bbc8-a8735ce906ff", "row_index": 594, "timestamp": "2017-03-11T18:36:44Z", "event_type": "DescribeSpotFleetRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57ee0625-439e-4adb-bbc8-a8735ce906ff", "eventTime": "2017-03-11T18:36:44Z", "eventName": "DescribeSpotFleetRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeSpotFleetRequestsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "764e4a5d-bbf8-420a-80a0-db3f7a963a91", "record_id": "flaws_cloudtrail:0000595:764e4a5d-bbf8-420a-80a0-db3f7a963a91", "row_index": 595, "timestamp": "2017-03-11T18:36:44Z", "event_type": "DescribeSpotInstanceRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "764e4a5d-bbf8-420a-80a0-db3f7a963a91", "eventTime": "2017-03-11T18:36:44Z", "eventName": "DescribeSpotInstanceRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"spotInstanceRequestIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1dc87d-31bb-4674-a73a-aed1d500c195", "record_id": "flaws_cloudtrail:0000596:fd1dc87d-31bb-4674-a73a-aed1d500c195", "row_index": 596, "timestamp": "2017-03-11T18:36:45Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1dc87d-31bb-4674-a73a-aed1d500c195", "eventTime": "2017-03-11T18:36:45Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b4ebb88-92a9-43ca-8cd3-ed441131", "record_id": "flaws_cloudtrail:0000597:9b4ebb88-92a9-43ca-8cd3-ed441131", "row_index": 597, "timestamp": "2017-03-11T18:36:46Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b4ebb88-92a9-43ca-8cd3-ed441131", "eventTime": "2017-03-11T18:36:46Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab749d5-5b2c-41f4-9031-95392ef5829", "record_id": "flaws_cloudtrail:0000598:aab749d5-5b2c-41f4-9031-95392ef5829", "row_index": 598, "timestamp": "2017-03-11T18:36:47Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab749d5-5b2c-41f4-9031-95392ef5829", "eventTime": "2017-03-11T18:36:47Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1d177c-2bd5-413b-9a23-c66cec100048b", "record_id": "flaws_cloudtrail:0000599:7e1d177c-2bd5-413b-9a23-c66cec100048b", "row_index": 599, "timestamp": "2017-03-11T18:36:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1d177c-2bd5-413b-9a23-c66cec100048b", "eventTime": "2017-03-11T18:36:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e3244b-2173-4de1-8c67-5c7f918a43f5", "record_id": "flaws_cloudtrail:0000600:a2e3244b-2173-4de1-8c67-5c7f918a43f5", "row_index": 600, "timestamp": "2017-03-11T18:36:49Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e3244b-2173-4de1-8c67-5c7f918a43f5", "eventTime": "2017-03-11T18:36:49Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd1e243-e848-4bd8-ab3b-0b7c3992d99a", "record_id": "flaws_cloudtrail:0000601:3cd1e243-e848-4bd8-ab3b-0b7c3992d99a", "row_index": 601, "timestamp": "2017-03-11T18:36:50Z", "event_type": "DescribeVpcClassicLinkDnsSupport", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd1e243-e848-4bd8-ab3b-0b7c3992d99a", "eventTime": "2017-03-11T18:36:50Z", "eventName": "DescribeVpcClassicLinkDnsSupport", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcClassicLinkDnsSupportRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e8c9aa-0f48-4572-934b-f724ad76a193", "record_id": "flaws_cloudtrail:0000602:18e8c9aa-0f48-4572-934b-f724ad76a193", "row_index": 602, "timestamp": "2017-03-11T18:36:51Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAFD1YEC13HI2OECSR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e8c9aa-0f48-4572-934b-f724ad76a193", "eventTime": "2017-03-11T18:36:51Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAFD1YEC13HI2OECSR", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-11T18:36:51Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01f4a77-cdf4-474c-b06e-92d88e065148", "record_id": "flaws_cloudtrail:0000603:f01f4a77-cdf4-474c-b06e-92d88e065148", "row_index": 603, "timestamp": "2017-03-11T18:36:52Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01f4a77-cdf4-474c-b06e-92d88e065148", "eventTime": "2017-03-11T18:36:52Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a88ffc-461c-413e-bd12-cd0e46a503c8", "record_id": "flaws_cloudtrail:0000604:57a88ffc-461c-413e-bd12-cd0e46a503c8", "row_index": 604, "timestamp": "2017-03-11T18:36:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a88ffc-461c-413e-bd12-cd0e46a503c8", "eventTime": "2017-03-11T18:36:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c046d50d-5c2d-4f51-8d77-7bf8727e348b", "record_id": "flaws_cloudtrail:0000605:c046d50d-5c2d-4f51-8d77-7bf8727e348b", "row_index": 605, "timestamp": "2017-03-11T18:36:54Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c046d50d-5c2d-4f51-8d77-7bf8727e348b", "eventTime": "2017-03-11T18:36:54Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61712-d1d0-4b9a-8cef-d6ac025d6cbc", "record_id": "flaws_cloudtrail:0000606:61712-d1d0-4b9a-8cef-d6ac025d6cbc", "row_index": 606, "timestamp": "2017-03-11T18:36:56Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61712-d1d0-4b9a-8cef-d6ac025d6cbc", "eventTime": "2017-03-11T18:36:56Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf24c315-512f-4dce-bc08-cbb7942d1b32", "record_id": "flaws_cloudtrail:0000607:bf24c315-512f-4dce-bc08-cbb7942d1b32", "row_index": 607, "timestamp": "2017-03-11T18:36:57Z", "event_type": "DescribeCases", "event_source": "support.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf24c315-512f-4dce-bc08-cbb7942d1b32", "eventTime": "2017-03-11T18:36:57Z", "eventName": "DescribeCases", "eventSource": "support.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: support:", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c90b09a3-93a7-483e-b0d9-c12552dc319f", "record_id": "flaws_cloudtrail:0000608:c90b09a3-93a7-483e-b0d9-c12552dc319f", "row_index": 608, "timestamp": "2017-03-11T18:36:58Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c90b09a3-93a7-483e-b0d9-c12552dc319f", "eventTime": "2017-03-11T18:36:58Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46d35bf7-52d0-4c2f-9826-2ae53a44c99d", "record_id": "flaws_cloudtrail:0000609:46d35bf7-52d0-4c2f-9826-2ae53a44c99d", "row_index": 609, "timestamp": "2017-03-11T18:36:59Z", "event_type": "DescribeVirtualGateways", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.7.241.251", "user_agent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46d35bf7-52d0-4c2f-9826-2ae53a44c99d", "eventTime": "2017-03-11T18:36:59Z", "eventName": "DescribeVirtualGateways", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.7.241.251", "userAgent": "aws-cli/1.10.67 Python/2.7.10 Darwin/16.4.0 botocore/1.4.93", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}