Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25293bde-f9e4-4064-a8a5-ee629d58d868", "record_id": "flaws_cloudtrail:0000000:25293bde-f9e4-4064-a8a5-ee629d58d868", "row_index": 0, "timestamp": "2019-08-10T22:01:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25293bde-f9e4-4064-a8a5-ee629d58d868", "eventTime": "2019-08-10T22:01:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDYVpBeGVGMDBDcVhRN0tzc0IxUmFPWXNWZlRONWt3NXIwd3JybEVrS0d1YWhnQmYwZFhycUxwTDROYktJYVNKYU9BanV5U2FHVWk3TVczaGxtREcwakU2bVl3ZzFGSGNnUC9mUW9aUWh5VDBvSElPMHhsZ0RRTkwrUzJMd1ptWXYyYldSUVZPb1VDOTc0SjF0bkt1SlBNdXhmeHdoaU54RWNqc0hSbFUveExUWTA0bVZ6Q2grUEhob0Vpait6NmQyNVdJK3BacHh3ZXAxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b773f9-d498-4eca-91f8-65f01bc96f3c", "record_id": "flaws_cloudtrail:0000001:59b773f9-d498-4eca-91f8-65f01bc96f3c", "row_index": 1, "timestamp": "2019-08-10T22:01:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b773f9-d498-4eca-91f8-65f01bc96f3c", "eventTime": "2019-08-10T22:01:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGRUUzRXdTbUpFNWZVU3FoK2pUMjgwdStEVnordVViamRIQlkxamYxa1RYMmJYaUlHalllKzlhTk1YdEV1T2VwbVBycXN6YjJ3L3FQUGx0Qy91OVlSU3dkbFo0MzREQ01RSEplcUNaUE4vNk9rMkpwL2R0aUw5VExmNHQrTGQveFFoUEN1U0tUNnh1eVhSVytsOGJVKzlGMVU4azFKT3ZDYU0xcUFuVm54T0d3cDArOFdSUi9KZHVpMURKeFRJdXdxUzhoTTRsZVdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94132c5-0d72-4a3e-a2f4-78c5d9f160667", "record_id": "flaws_cloudtrail:0000002:94132c5-0d72-4a3e-a2f4-78c5d9f160667", "row_index": 2, "timestamp": "2019-08-10T22:01:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94132c5-0d72-4a3e-a2f4-78c5d9f160667", "eventTime": "2019-08-10T22:01:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQkFPbCtGeWJNcVdFcmZlZE9WR3UvbUMwc1Ywa2R1TTZRK2VDNFA0QXp1T25FcXBpVjM3S2ErZWpyV1VGdjJ1WGZtMDY4MTJMV2xxMTFkb0s0eFpkM0p4Vm1wN3Y2VEZTQUFpSVJXcVRTQWRBS0IweXA5WWpGVXRST1VYb3NpbDN2WldZWVVqZTZ3TDBHZkJhUTVhczk3WnQvdjYwV3JNWjNzMjlWTkZjUldNaU1YSGNLVW43VHpIZ3dKalMwazJCNEV5dy9BSmZXRStPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b773f9-d498-4eca-91f8-65f01bc96f3c", "record_id": "flaws_cloudtrail:0000003:59b773f9-d498-4eca-91f8-65f01bc96f3c", "row_index": 3, "timestamp": "2019-08-10T22:01:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b773f9-d498-4eca-91f8-65f01bc96f3c", "eventTime": "2019-08-10T22:01:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGRUUzRXdTbUpFNWZVU3FoK2pUMjgwdStEVnordVViamRIQlkxamYxa1RYMmJYaUlHalllKzlhTk1YdEV1T2VwbVBycXN6YjJ3L3FQUGx0Qy91OVlSU3dkbFo0MzREQ01RSEplcUNaUE4vNk9rMkpwL2R0aUw5VExmNHQrTGQveFFoUEN1U0tUNnh1eVhSVytsOGJVKzlGMVU4azFKT3ZDYU0xcUFuVm54T0d3cDArOFdSUi9KZHVpMURKeFRJdXdxUzhoTTRsZVdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94132c5-0d72-4a3e-a2f4-78c5d9f160667", "record_id": "flaws_cloudtrail:0000004:94132c5-0d72-4a3e-a2f4-78c5d9f160667", "row_index": 4, "timestamp": "2019-08-10T22:01:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94132c5-0d72-4a3e-a2f4-78c5d9f160667", "eventTime": "2019-08-10T22:01:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQkFPbCtGeWJNcVdFcmZlZE9WR3UvbUMwc1Ywa2R1TTZRK2VDNFA0QXp1T25FcXBpVjM3S2ErZWpyV1VGdjJ1WGZtMDY4MTJMV2xxMTFkb0s0eFpkM0p4Vm1wN3Y2VEZTQUFpSVJXcVRTQWRBS0IweXA5WWpGVXRST1VYb3NpbDN2WldZWVVqZTZ3TDBHZkJhUTVhczk3WnQvdjYwV3JNWjNzMjlWTkZjUldNaU1YSGNLVW43VHpIZ3dKalMwazJCNEV5dy9BSmZXRStPQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a87cc31-0775-4bb8-ad2b-86716579032f", "record_id": "flaws_cloudtrail:0000005:5a87cc31-0775-4bb8-ad2b-86716579032f", "row_index": 5, "timestamp": "2019-08-10T22:01:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a87cc31-0775-4bb8-ad2b-86716579032f", "eventTime": "2019-08-10T22:01:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjbTEraHNTQWNndExUTGN5cEhqVDBrZU9YbEYxKzJUNWJCQ1huOXlIczFKbFdBT2ZlYzg1SnZZMVBpbEg5cVoxSHFoWm9rNnRickdmalJ4TEFnYW9oUzcxNWExQW9DUTIyVWIrQU8zRTA3eXRMN2FRSCtINEMvb2xvNkFWRFZEOERlTzZpYUdiSjBmb3RWQ1NEOE56VWVnSk50SVdMalppVDIxY0tLNWJjV2VaSUdmVmRDMWpMaTFMdHU5RXNDYkFXd0NMZXFCQXJBa252YXV6MHkwNERIc1YvUkNGanVNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fad6f83-471b-48d0-a213-6132a38c23b0", "record_id": "flaws_cloudtrail:0000006:1fad6f83-471b-48d0-a213-6132a38c23b0", "row_index": 6, "timestamp": "2019-08-10T22:01:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fad6f83-471b-48d0-a213-6132a38c23b0", "eventTime": "2019-08-10T22:01:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJanhKQ2hMLzZsMy82VXpFVEVnaFpEcEFMSzFqc3daa1p6U0ZkWE5iaXU1NmVEYkdlNklWVVhQR1BOdjhUWnY1WkhNMHFpU2lITVhCNkRxbFl4L3hrNFdXTnhWSUV0M0NWMUlOUmpJZFkxbXI1S3dwVzdFc2FtZHpuZVNCOUhtQ0szcGFlMzBuS0UzUG1oQmZKU1RYM2JqbEx3dVdCR1hOcVJ5VkFpZTMyN241QU9yWnN5THNtbERJTUlzMUYxU3dUellJVXYySDlYMHFVVHFVWk9BN0l3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a87cc31-0775-4bb8-ad2b-86716579032f", "record_id": "flaws_cloudtrail:0000007:5a87cc31-0775-4bb8-ad2b-86716579032f", "row_index": 7, "timestamp": "2019-08-10T22:01:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a87cc31-0775-4bb8-ad2b-86716579032f", "eventTime": "2019-08-10T22:01:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjbTEraHNTQWNndExUTGN5cEhqVDBrZU9YbEYxKzJUNWJCQ1huOXlIczFKbFdBT2ZlYzg1SnZZMVBpbEg5cVoxSHFoWm9rNnRickdmalJ4TEFnYW9oUzcxNWExQW9DUTIyVWIrQU8zRTA3eXRMN2FRSCtINEMvb2xvNkFWRFZEOERlTzZpYUdiSjBmb3RWQ1NEOE56VWVnSk50SVdMalppVDIxY0tLNWJjV2VaSUdmVmRDMWpMaTFMdHU5RXNDYkFXd0NMZXFCQXJBa252YXV6MHkwNERIc1YvUkNGanVNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fad6f83-471b-48d0-a213-6132a38c23b0", "record_id": "flaws_cloudtrail:0000008:1fad6f83-471b-48d0-a213-6132a38c23b0", "row_index": 8, "timestamp": "2019-08-10T22:01:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fad6f83-471b-48d0-a213-6132a38c23b0", "eventTime": "2019-08-10T22:01:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJanhKQ2hMLzZsMy82VXpFVEVnaFpEcEFMSzFqc3daa1p6U0ZkWE5iaXU1NmVEYkdlNklWVVhQR1BOdjhUWnY1WkhNMHFpU2lITVhCNkRxbFl4L3hrNFdXTnhWSUV0M0NWMUlOUmpJZFkxbXI1S3dwVzdFc2FtZHpuZVNCOUhtQ0szcGFlMzBuS0UzUG1oQmZKU1RYM2JqbEx3dVdCR1hOcVJ5VkFpZTMyN241QU9yWnN5THNtbERJTUlzMUYxU3dUellJVXYySDlYMHFVVHFVWk9BN0l3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0d1b5e1-32d7-47ad-b68a-b7ff8c7ca553", "record_id": "flaws_cloudtrail:0000009:f0d1b5e1-32d7-47ad-b68a-b7ff8c7ca553", "row_index": 9, "timestamp": "2019-08-10T22:01:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0d1b5e1-32d7-47ad-b68a-b7ff8c7ca553", "eventTime": "2019-08-10T22:01:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIdkxpdU5LbEdKb0tFSi9XaU1RaXlsQWFicFR2dGM3djcycU9uSlZ5MU53R25rVnVUUThNb2JtN0czNWdZYXl3cHgrdG1jWldxeFIrd3Z1cVFaQ3lqWTdOY1ZqU3R3clM0Sk00K0RtRkExbi9HTGJVZ2UzUExTZ2ZNZ3VkcmZmN0d1Q3lGdGNYMGF5MEg2S1hiTGRycnNWV3VlME9YNkxZNk8ycVNkREl3RzZSMTNCdnErYXA5M1lCSjJLaXpRTGpXRzJzTWQrdnNvZktNMmwyZ1VXMlRDbU01ZERzeUJJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0d1b5e1-32d7-47ad-b68a-b7ff8c7ca553", "record_id": "flaws_cloudtrail:0000010:f0d1b5e1-32d7-47ad-b68a-b7ff8c7ca553", "row_index": 10, "timestamp": "2019-08-10T22:01:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0d1b5e1-32d7-47ad-b68a-b7ff8c7ca553", "eventTime": "2019-08-10T22:01:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIdkxpdU5LbEdKb0tFSi9XaU1RaXlsQWFicFR2dGM3djcycU9uSlZ5MU53R25rVnVUUThNb2JtN0czNWdZYXl3cHgrdG1jWldxeFIrd3Z1cVFaQ3lqWTdOY1ZqU3R3clM0Sk00K0RtRkExbi9HTGJVZ2UzUExTZ2ZNZ3VkcmZmN0d1Q3lGdGNYMGF5MEg2S1hiTGRycnNWV3VlME9YNkxZNk8ycVNkREl3RzZSMTNCdnErYXA5M1lCSjJLaXpRTGpXRzJzTWQrdnNvZktNMmwyZ1VXMlRDbU01ZERzeUJJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79979bcf-9563-4bbd-bca7-62019d88f1c7", "record_id": "flaws_cloudtrail:0000011:79979bcf-9563-4bbd-bca7-62019d88f1c7", "row_index": 11, "timestamp": "2019-08-10T22:01:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79979bcf-9563-4bbd-bca7-62019d88f1c7", "eventTime": "2019-08-10T22:01:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOOFE5d2JUMktYU2M4czU1N1NTclRsaUFqQ09OeVcxbmxhdEM1K1F6djUvRWFuZkJFSXJjbHIzL1JoQWFRNTVvVEQ1OUF6UjFyNitoWTNMbDFLckhDSDBsWkl2NlpSZ2JVVHhnUUxGd3F0UERWNTE2endYbnVGa1dERGV3ckxsNGx6SHZVZXV2ZDh0QzRIWm4yQXJzOVZVblZCaUhFbk5wZmhqb0tic1RXYkIrZWFSb0gxS25EelNYdHczcU5Xc0t5RDR3dnZUWC9vZCtwblFRMzA3ajZtT3o3V0VzY053PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e05335a-80a3-4ddc-85ad-49ac7dde97dc", "record_id": "flaws_cloudtrail:0000012:7e05335a-80a3-4ddc-85ad-49ac7dde97dc", "row_index": 12, "timestamp": "2019-08-10T22:01:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e05335a-80a3-4ddc-85ad-49ac7dde97dc", "eventTime": "2019-08-10T22:01:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtSllpdlBJTFZERGVSR1ZJTGdWNG5HODBYTnl1WEFCRnNDbVlUV3c1YkRqdHZ1aGVjYzA5Y3o3SXBITEtWOE5kMEh3TzdGaW9EeDk3Q3Y0bXNzeU1xdW81YzdnUUo1RUlFbjBCSHpNMFFJY0JMeVlYV3c3aUdqTmU4UUhMU29mLzZ2ZmNQTEFsdng0QjJVM1hIV2dNTDNZYmY0WHF1QlpuTjMvQjBPaXdJcElUSHNsTmc0b0JQclFXWVNta2s5az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79979bcf-9563-4bbd-bca7-62019d88f1c7", "record_id": "flaws_cloudtrail:0000013:79979bcf-9563-4bbd-bca7-62019d88f1c7", "row_index": 13, "timestamp": "2019-08-10T22:01:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79979bcf-9563-4bbd-bca7-62019d88f1c7", "eventTime": "2019-08-10T22:01:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOOFE5d2JUMktYU2M4czU1N1NTclRsaUFqQ09OeVcxbmxhdEM1K1F6djUvRWFuZkJFSXJjbHIzL1JoQWFRNTVvVEQ1OUF6UjFyNitoWTNMbDFLckhDSDBsWkl2NlpSZ2JVVHhnUUxGd3F0UERWNTE2endYbnVGa1dERGV3ckxsNGx6SHZVZXV2ZDh0QzRIWm4yQXJzOVZVblZCaUhFbk5wZmhqb0tic1RXYkIrZWFSb0gxS25EelNYdHczcU5Xc0t5RDR3dnZUWC9vZCtwblFRMzA3ajZtT3o3V0VzY053PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e05335a-80a3-4ddc-85ad-49ac7dde97dc", "record_id": "flaws_cloudtrail:0000014:7e05335a-80a3-4ddc-85ad-49ac7dde97dc", "row_index": 14, "timestamp": "2019-08-10T22:01:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e05335a-80a3-4ddc-85ad-49ac7dde97dc", "eventTime": "2019-08-10T22:01:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtSllpdlBJTFZERGVSR1ZJTGdWNG5HODBYTnl1WEFCRnNDbVlUV3c1YkRqdHZ1aGVjYzA5Y3o3SXBITEtWOE5kMEh3TzdGaW9EeDk3Q3Y0bXNzeU1xdW81YzdnUUo1RUlFbjBCSHpNMFFJY0JMeVlYV3c3aUdqTmU4UUhMU29mLzZ2ZmNQTEFsdng0QjJVM1hIV2dNTDNZYmY0WHF1QlpuTjMvQjBPaXdJcElUSHNsTmc0b0JQclFXWVNta2s5az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664fb2f0-2e6f-4db4-af1b-e20033fcb2ec", "record_id": "flaws_cloudtrail:0000015:664fb2f0-2e6f-4db4-af1b-e20033fcb2ec", "row_index": 15, "timestamp": "2019-08-10T22:01:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664fb2f0-2e6f-4db4-af1b-e20033fcb2ec", "eventTime": "2019-08-10T22:01:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoaUtjMzJieVhsMUZtaHYvNzVWMVZCc2RDY1NUWDRDemYra3RUdW94SU02TjFOVVUyYkhuSDF0dFRhK0VLeEluS3Jpbkt5NnJiOWlEZEk1dWF0UzlJSGU3QkNXZEs2MjdTY1o2OUtnV2VHZ1lJeXh1UGY2U283amQyV2dzNmZuMnpxaWU1V2FGRDVIdzNxZ20yUC9DN09WQUs0N09Td1dMZUkyUGN5MDBKeW54QmxQMEZPUk94cjdNV0RxUkJLMW8vL3M0bkU3dUpiL0VzSmtlbHREQnlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664fb2f0-2e6f-4db4-af1b-e20033fcb2ec", "record_id": "flaws_cloudtrail:0000016:664fb2f0-2e6f-4db4-af1b-e20033fcb2ec", "row_index": 16, "timestamp": "2019-08-10T22:01:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664fb2f0-2e6f-4db4-af1b-e20033fcb2ec", "eventTime": "2019-08-10T22:01:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoaUtjMzJieVhsMUZtaHYvNzVWMVZCc2RDY1NUWDRDemYra3RUdW94SU02TjFOVVUyYkhuSDF0dFRhK0VLeEluS3Jpbkt5NnJiOWlEZEk1dWF0UzlJSGU3QkNXZEs2MjdTY1o2OUtnV2VHZ1lJeXh1UGY2U283amQyV2dzNmZuMnpxaWU1V2FGRDVIdzNxZ20yUC9DN09WQUs0N09Td1dMZUkyUGN5MDBKeW54QmxQMEZPUk94cjdNV0RxUkJLMW8vL3M0bkU3dUpiL0VzSmtlbHREQnlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fba55aae-a835-440e-818e-974213eb3cd2", "record_id": "flaws_cloudtrail:0000017:fba55aae-a835-440e-818e-974213eb3cd2", "row_index": 17, "timestamp": "2019-08-10T22:01:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fba55aae-a835-440e-818e-974213eb3cd2", "eventTime": "2019-08-10T22:01:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrVGIzS3hxR01TYW5EU2d1WGo3NFBuNlBacnJMMGV1RFdLMzRuRVNsZ0x5WXdEcXU2NUo2NkIzY1NwVmhoVWRQYkpGcUJFS0Z0V3lwemhqeDJkdGFkV01xTWY4VDk3U2RVeDJ4b0xibE1ZdXVHZkN3dVBSNGp5ekFHUUFGdFpqNEtRMzI1eS9jQ2ZjYXFQTWdRSDVyTkxXMmFYeDZWaFAvcXZxSTVrSDEwckJlM1BLYnJ4VEY5MktldHVkZ1ZGbHlqUzhEZFhYOXJHN2JXbkpJNGh5S2dBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a022c8f3-2c86-45d4-845e-86e90a7360e0", "record_id": "flaws_cloudtrail:0000018:a022c8f3-2c86-45d4-845e-86e90a7360e0", "row_index": 18, "timestamp": "2019-08-10T22:01:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a022c8f3-2c86-45d4-845e-86e90a7360e0", "eventTime": "2019-08-10T22:01:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhdHdMQzFkNzVPaTBDOThvdXBkYndIbTBBT25XZHNoYkhPSlpEVzlwMW5Nd2V2UG5ySVVPSmhqYVcyWTNxMnpJNDhudWg4WUJIVHdCdHlXZWQ0S0d2RnlzTFl3RlZFbHlZZDdLWm5vK25EZ3d3TzllZ09yK0dIM2g4WXB6YUlKQUpDSXJCMTdFV1NCSXpRWjZzRDVKcHRkMUFBdWt5NEVVaWc0eXhVazkzYWtGZTJZa09TMTI2aDNncHdyWVhnS3BKdk9JWVNUUEY1L1pmcEhGZ0hYdGRGWTB3b3krL3FFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fba55aae-a835-440e-818e-974213eb3cd2", "record_id": "flaws_cloudtrail:0000019:fba55aae-a835-440e-818e-974213eb3cd2", "row_index": 19, "timestamp": "2019-08-10T22:01:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fba55aae-a835-440e-818e-974213eb3cd2", "eventTime": "2019-08-10T22:01:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrVGIzS3hxR01TYW5EU2d1WGo3NFBuNlBacnJMMGV1RFdLMzRuRVNsZ0x5WXdEcXU2NUo2NkIzY1NwVmhoVWRQYkpGcUJFS0Z0V3lwemhqeDJkdGFkV01xTWY4VDk3U2RVeDJ4b0xibE1ZdXVHZkN3dVBSNGp5ekFHUUFGdFpqNEtRMzI1eS9jQ2ZjYXFQTWdRSDVyTkxXMmFYeDZWaFAvcXZxSTVrSDEwckJlM1BLYnJ4VEY5MktldHVkZ1ZGbHlqUzhEZFhYOXJHN2JXbkpJNGh5S2dBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a022c8f3-2c86-45d4-845e-86e90a7360e0", "record_id": "flaws_cloudtrail:0000020:a022c8f3-2c86-45d4-845e-86e90a7360e0", "row_index": 20, "timestamp": "2019-08-10T22:01:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a022c8f3-2c86-45d4-845e-86e90a7360e0", "eventTime": "2019-08-10T22:01:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhdHdMQzFkNzVPaTBDOThvdXBkYndIbTBBT25XZHNoYkhPSlpEVzlwMW5Nd2V2UG5ySVVPSmhqYVcyWTNxMnpJNDhudWg4WUJIVHdCdHlXZWQ0S0d2RnlzTFl3RlZFbHlZZDdLWm5vK25EZ3d3TzllZ09yK0dIM2g4WXB6YUlKQUpDSXJCMTdFV1NCSXpRWjZzRDVKcHRkMUFBdWt5NEVVaWc0eXhVazkzYWtGZTJZa09TMTI2aDNncHdyWVhnS3BKdk9JWVNUUEY1L1pmcEhGZ0hYdGRGWTB3b3krL3FFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa5b281a-b1f3-4c31-8236-b80396e9c163", "record_id": "flaws_cloudtrail:0000021:fa5b281a-b1f3-4c31-8236-b80396e9c163", "row_index": 21, "timestamp": "2019-08-10T22:01:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa5b281a-b1f3-4c31-8236-b80396e9c163", "eventTime": "2019-08-10T22:01:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUMXdVS2hmUExRalFzMWNsd0pHY2JySkpaVWtJL2hvY25UOFRKbWRwMExzdTN5WTBYVENHejcrY2EyVDJIYmlVaTZmb3BvUnQ4YWwvU0Q1Wm1UU0hUOFFsdHhSd3NJUDZvdytBWEozenVmUUZMOHg2YUlHQStJMXVaOFAzR0dVMEpWVDZ5SXNGQy9iekxsMlNocVhFTEhsTENFYVg4dDYwT2UzTkhKQWRGOU9STG1sNTA0U0Z3NUVDYUUyMm5YUGx6SmU1Nm5Kb2tyRG5SbGE5bFJyeUlCVVFOOEp5dkRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa5b281a-b1f3-4c31-8236-b80396e9c163", "record_id": "flaws_cloudtrail:0000022:fa5b281a-b1f3-4c31-8236-b80396e9c163", "row_index": 22, "timestamp": "2019-08-10T22:01:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa5b281a-b1f3-4c31-8236-b80396e9c163", "eventTime": "2019-08-10T22:01:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUMXdVS2hmUExRalFzMWNsd0pHY2JySkpaVWtJL2hvY25UOFRKbWRwMExzdTN5WTBYVENHejcrY2EyVDJIYmlVaTZmb3BvUnQ4YWwvU0Q1Wm1UU0hUOFFsdHhSd3NJUDZvdytBWEozenVmUUZMOHg2YUlHQStJMXVaOFAzR0dVMEpWVDZ5SXNGQy9iekxsMlNocVhFTEhsTENFYVg4dDYwT2UzTkhKQWRGOU9STG1sNTA0U0Z3NUVDYUUyMm5YUGx6SmU1Nm5Kb2tyRG5SbGE5bFJyeUlCVVFOOEp5dkRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d139524b-d695-4a5c-b7ee-c921ad233bea", "record_id": "flaws_cloudtrail:0000023:d139524b-d695-4a5c-b7ee-c921ad233bea", "row_index": 23, "timestamp": "2019-08-10T22:01:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d139524b-d695-4a5c-b7ee-c921ad233bea", "eventTime": "2019-08-10T22:01:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRbDZ1ZE8zRU40ZE02ZHpTV3FqY3pxVWwzMWpzd1NBSTIrWVY2NmRUWmt2cVVPTExobkRCdDZ3bzMxZ3dqWTF0WG44UXB4aTdud1FkaVF0UTRIeVJLeGxQR1prQ2xvenRxVzEzQTROd3dVdG50V0JJdjRObDlmSzdRR3NFbXorMFMrQlBpNkowdWkrRWV1bXc3NzRhRThRRGlyTnJRQmRxUEswRXRzVTV6WVNlemR6dlE0aVp6TElUWGhKMnVsMXUzTmlFU1VTTGhmYUxXVWo5NHpCc2RnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d139524b-d695-4a5c-b7ee-c921ad233bea", "record_id": "flaws_cloudtrail:0000024:d139524b-d695-4a5c-b7ee-c921ad233bea", "row_index": 24, "timestamp": "2019-08-10T22:01:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d139524b-d695-4a5c-b7ee-c921ad233bea", "eventTime": "2019-08-10T22:01:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRbDZ1ZE8zRU40ZE02ZHpTV3FqY3pxVWwzMWpzd1NBSTIrWVY2NmRUWmt2cVVPTExobkRCdDZ3bzMxZ3dqWTF0WG44UXB4aTdud1FkaVF0UTRIeVJLeGxQR1prQ2xvenRxVzEzQTROd3dVdG50V0JJdjRObDlmSzdRR3NFbXorMFMrQlBpNkowdWkrRWV1bXc3NzRhRThRRGlyTnJRQmRxUEswRXRzVTV6WVNlemR6dlE0aVp6TElUWGhKMnVsMXUzTmlFU1VTTGhmYUxXVWo5NHpCc2RnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b3eea7d-3edb-43d3-8578-3aa1807fffd8", "record_id": "flaws_cloudtrail:0000025:0b3eea7d-3edb-43d3-8578-3aa1807fffd8", "row_index": 25, "timestamp": "2019-08-10T22:03:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b3eea7d-3edb-43d3-8578-3aa1807fffd8", "eventTime": "2019-08-10T22:03:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b3eea7d-3edb-43d3-8578-3aa1807fffd8", "record_id": "flaws_cloudtrail:0000026:0b3eea7d-3edb-43d3-8578-3aa1807fffd8", "row_index": 26, "timestamp": "2019-08-10T22:03:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b3eea7d-3edb-43d3-8578-3aa1807fffd8", "eventTime": "2019-08-10T22:03:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a706f084-2baf-4941-9c9a-6aeb9026483f", "record_id": "flaws_cloudtrail:0000027:a706f084-2baf-4941-9c9a-6aeb9026483f", "row_index": 27, "timestamp": "2019-08-10T22:05:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a706f084-2baf-4941-9c9a-6aeb9026483f", "eventTime": "2019-08-10T22:05:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-ea3ab5d49d144c873"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a706f084-2baf-4941-9c9a-6aeb9026483f", "record_id": "flaws_cloudtrail:0000028:a706f084-2baf-4941-9c9a-6aeb9026483f", "row_index": 28, "timestamp": "2019-08-10T22:05:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a706f084-2baf-4941-9c9a-6aeb9026483f", "eventTime": "2019-08-10T22:05:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-ea3ab5d49d144c873"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac12bd00-4458-4f7e-be47-49196a6bce9", "record_id": "flaws_cloudtrail:0000029:ac12bd00-4458-4f7e-be47-49196a6bce9", "row_index": 29, "timestamp": "2019-08-10T22:17:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac12bd00-4458-4f7e-be47-49196a6bce9", "eventTime": "2019-08-10T22:17:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac12bd00-4458-4f7e-be47-49196a6bce9", "record_id": "flaws_cloudtrail:0000030:ac12bd00-4458-4f7e-be47-49196a6bce9", "row_index": 30, "timestamp": "2019-08-10T22:17:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac12bd00-4458-4f7e-be47-49196a6bce9", "eventTime": "2019-08-10T22:17:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a026452f-fdb2-4abf-b011-f8c32f870c3f", "record_id": "flaws_cloudtrail:0000031:1a026452f-fdb2-4abf-b011-f8c32f870c3f", "row_index": 31, "timestamp": "2019-08-10T22:22:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a026452f-fdb2-4abf-b011-f8c32f870c3f", "eventTime": "2019-08-10T22:22:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a026452f-fdb2-4abf-b011-f8c32f870c3f", "record_id": "flaws_cloudtrail:0000032:1a026452f-fdb2-4abf-b011-f8c32f870c3f", "row_index": 32, "timestamp": "2019-08-10T22:22:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a026452f-fdb2-4abf-b011-f8c32f870c3f", "eventTime": "2019-08-10T22:22:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82e485a-a725-4e73-a919-1792b3e70ba5", "record_id": "flaws_cloudtrail:0000033:c82e485a-a725-4e73-a919-1792b3e70ba5", "row_index": 33, "timestamp": "2019-08-10T22:30:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82e485a-a725-4e73-a919-1792b3e70ba5", "eventTime": "2019-08-10T22:30:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82e485a-a725-4e73-a919-1792b3e70ba5", "record_id": "flaws_cloudtrail:0000034:c82e485a-a725-4e73-a919-1792b3e70ba5", "row_index": 34, "timestamp": "2019-08-10T22:30:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82e485a-a725-4e73-a919-1792b3e70ba5", "eventTime": "2019-08-10T22:30:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dac1200-85a0-4194-9d2f-9a62a63057ba", "record_id": "flaws_cloudtrail:0000035:9dac1200-85a0-4194-9d2f-9a62a63057ba", "row_index": 35, "timestamp": "2019-08-10T22:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dac1200-85a0-4194-9d2f-9a62a63057ba", "eventTime": "2019-08-10T22:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1EUYUICLU34J279V", "expiration": "Aug 11, 2019 4:56:35 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dac1200-85a0-4194-9d2f-9a62a63057ba", "record_id": "flaws_cloudtrail:0000036:9dac1200-85a0-4194-9d2f-9a62a63057ba", "row_index": 36, "timestamp": "2019-08-10T22:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dac1200-85a0-4194-9d2f-9a62a63057ba", "eventTime": "2019-08-10T22:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1EUYUICLU34J279V", "expiration": "Aug 11, 2019 4:56:35 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a25e17f6-ab97-43d2-8fd7-67e89cc3693e", "record_id": "flaws_cloudtrail:0000037:a25e17f6-ab97-43d2-8fd7-67e89cc3693e", "row_index": 37, "timestamp": "2019-08-10T22:34:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a25e17f6-ab97-43d2-8fd7-67e89cc3693e", "eventTime": "2019-08-10T22:34:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a25e17f6-ab97-43d2-8fd7-67e89cc3693e", "record_id": "flaws_cloudtrail:0000038:a25e17f6-ab97-43d2-8fd7-67e89cc3693e", "row_index": 38, "timestamp": "2019-08-10T22:34:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a25e17f6-ab97-43d2-8fd7-67e89cc3693e", "eventTime": "2019-08-10T22:34:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf68373-6e9b-487e-aaa7-2509c1de6864", "record_id": "flaws_cloudtrail:0000039:cf68373-6e9b-487e-aaa7-2509c1de6864", "row_index": 39, "timestamp": "2019-08-10T22:34:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf68373-6e9b-487e-aaa7-2509c1de6864", "eventTime": "2019-08-10T22:34:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNW1jdS94Ky9OUG1Rd2d1NFE3bEFKdjRSQTRadUlSVGhMT3R6cVFxbU84cWlRcVcyM0JZTXoyc3R4TFRxZUQxUW9HVzRxeElVK1p1WU8wNndYU2RWKzVnbW16eTlWUGRsOTFjZDRlUTFxanQ4cGpqT1d3RHJobTlrd2p1S3BhcDVja2ZzYytsRVd5UitvVEZ0dmVLRFR0QVo1VXJuNkowckxTOXk0eHVvdmtmQTJnZSsrZE55TWQwNGw4UW1HODh5VjV5Q1lES0JEMG81QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf68373-6e9b-487e-aaa7-2509c1de6864", "record_id": "flaws_cloudtrail:0000040:cf68373-6e9b-487e-aaa7-2509c1de6864", "row_index": 40, "timestamp": "2019-08-10T22:34:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf68373-6e9b-487e-aaa7-2509c1de6864", "eventTime": "2019-08-10T22:34:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNW1jdS94Ky9OUG1Rd2d1NFE3bEFKdjRSQTRadUlSVGhMT3R6cVFxbU84cWlRcVcyM0JZTXoyc3R4TFRxZUQxUW9HVzRxeElVK1p1WU8wNndYU2RWKzVnbW16eTlWUGRsOTFjZDRlUTFxanQ4cGpqT1d3RHJobTlrd2p1S3BhcDVja2ZzYytsRVd5UitvVEZ0dmVLRFR0QVo1VXJuNkowckxTOXk0eHVvdmtmQTJnZSsrZE55TWQwNGw4UW1HODh5VjV5Q1lES0JEMG81QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46d243300-c1d6-4a5c-ba10-bfa57ed297974", "record_id": "flaws_cloudtrail:0000041:46d243300-c1d6-4a5c-ba10-bfa57ed297974", "row_index": 41, "timestamp": "2019-08-10T22:34:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46d243300-c1d6-4a5c-ba10-bfa57ed297974", "eventTime": "2019-08-10T22:34:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrbTRQcnZ1Tmo3RXF4UkZ4NUQrNnpJTnZHazliVTBlK25seVhZT2dHdHk5dHVaanJuYkJXdTZrSlpSNUNYZENIaXl0QTdkWk4xUE5FK0RUbFVXbWFXQjlUejNDOW1KSERDWGVDQ3BPOUs5WHgxUGM3Z0dvUktiZnVXWE0zVUFoanRpcU92QWYzRHNsU05GMHFpb0ZEV1NDNGdMMnZQSnlJSWVzME1qNzlwOXJhcGRYK20vVVJOSngyNVhLZHl1UXVyNWJ5a2IveEo0Q0IwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46d243300-c1d6-4a5c-ba10-bfa57ed297974", "record_id": "flaws_cloudtrail:0000042:46d243300-c1d6-4a5c-ba10-bfa57ed297974", "row_index": 42, "timestamp": "2019-08-10T22:34:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46d243300-c1d6-4a5c-ba10-bfa57ed297974", "eventTime": "2019-08-10T22:34:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrbTRQcnZ1Tmo3RXF4UkZ4NUQrNnpJTnZHazliVTBlK25seVhZT2dHdHk5dHVaanJuYkJXdTZrSlpSNUNYZENIaXl0QTdkWk4xUE5FK0RUbFVXbWFXQjlUejNDOW1KSERDWGVDQ3BPOUs5WHgxUGM3Z0dvUktiZnVXWE0zVUFoanRpcU92QWYzRHNsU05GMHFpb0ZEV1NDNGdMMnZQSnlJSWVzME1qNzlwOXJhcGRYK20vVVJOSngyNVhLZHl1UXVyNWJ5a2IveEo0Q0IwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4dd9014-0099-4ac4-a696-f58525e", "record_id": "flaws_cloudtrail:0000043:b4dd9014-0099-4ac4-a696-f58525e", "row_index": 43, "timestamp": "2019-08-10T22:34:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4dd9014-0099-4ac4-a696-f58525e", "eventTime": "2019-08-10T22:34:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyUFlSNXJxaDEyUHp0cVVXQlhiVlFLTVVYK1Vwd01YMUZOU0ViNHNqbHFENmpBWlMxT0JOYWw3S3BrTFJLMUtKYkpKMjFjMjBpS0MyWHZMQlUwSGdnQWM2SURBZGN0SmtCbDdkMTErMFR0ZlhSZFVvTDk0NU02Nmh6RVZDSHZlTFAwcUJiNnh0U3BUam5DRlZlbWV5RUI1NnNtVW43VVdtUjdWeGNqM0dZakxlU2c1dUI1OXVUM3VEWTY1N0NnMkJobXdjZUplZmp3b25GZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4dd9014-0099-4ac4-a696-f58525e", "record_id": "flaws_cloudtrail:0000044:b4dd9014-0099-4ac4-a696-f58525e", "row_index": 44, "timestamp": "2019-08-10T22:34:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4dd9014-0099-4ac4-a696-f58525e", "eventTime": "2019-08-10T22:34:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyUFlSNXJxaDEyUHp0cVVXQlhiVlFLTVVYK1Vwd01YMUZOU0ViNHNqbHFENmpBWlMxT0JOYWw3S3BrTFJLMUtKYkpKMjFjMjBpS0MyWHZMQlUwSGdnQWM2SURBZGN0SmtCbDdkMTErMFR0ZlhSZFVvTDk0NU02Nmh6RVZDSHZlTFAwcUJiNnh0U3BUam5DRlZlbWV5RUI1NnNtVW43VVdtUjdWeGNqM0dZakxlU2c1dUI1OXVUM3VEWTY1N0NnMkJobXdjZUplZmp3b25GZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc44fe0-a2ac-4dfe-b4a2-381fa66567", "record_id": "flaws_cloudtrail:0000045:cdc44fe0-a2ac-4dfe-b4a2-381fa66567", "row_index": 45, "timestamp": "2019-08-10T22:35:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc44fe0-a2ac-4dfe-b4a2-381fa66567", "eventTime": "2019-08-10T22:35:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaT3lKeGpDK1RWbnZpMWhzR1dVM3l5cndRbGJvMHRpc1pGM2dBMkpPMVoxMzZhZndma29Ebk10VWl2dHpkeE8vMk1XdE5oL2QyTFV0aXg2UmRHcHpzTWR1S1BuSXZCRGFJcFBFdS9xdGNXaFgwUzdyQjAyemgrMkdKaDlFMThNYXIzYVgxOFAxb2RLamNjSnJhUnhiYlNwbWhPa2V2TXdrNUFxUkZEWFAwSkNod1pLM0tMNVlvVCtzK0NieHhtSTB5blF5Wk5ubmRONUdRdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc44fe0-a2ac-4dfe-b4a2-381fa66567", "record_id": "flaws_cloudtrail:0000046:cdc44fe0-a2ac-4dfe-b4a2-381fa66567", "row_index": 46, "timestamp": "2019-08-10T22:35:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc44fe0-a2ac-4dfe-b4a2-381fa66567", "eventTime": "2019-08-10T22:35:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaT3lKeGpDK1RWbnZpMWhzR1dVM3l5cndRbGJvMHRpc1pGM2dBMkpPMVoxMzZhZndma29Ebk10VWl2dHpkeE8vMk1XdE5oL2QyTFV0aXg2UmRHcHpzTWR1S1BuSXZCRGFJcFBFdS9xdGNXaFgwUzdyQjAyemgrMkdKaDlFMThNYXIzYVgxOFAxb2RLamNjSnJhUnhiYlNwbWhPa2V2TXdrNUFxUkZEWFAwSkNod1pLM0tMNVlvVCtzK0NieHhtSTB5blF5Wk5ubmRONUdRdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab96b67-3bed-49f1-a220-f4840dc700c4", "record_id": "flaws_cloudtrail:0000047:aab96b67-3bed-49f1-a220-f4840dc700c4", "row_index": 47, "timestamp": "2019-08-10T22:35:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab96b67-3bed-49f1-a220-f4840dc700c4", "eventTime": "2019-08-10T22:35:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkZlBKWldoRytKYXVxS3VzL1BrYmJGWUdWa3RXTWZjR0p5QXVubmpqaHpzNEJlNFk2c3RhZ3BQVktTRFU1V2M4c1NhUXlLUEY5eFMzZWZQZkdkOGFDMjdJUU9TQmhlNmZwMCt6UklBNkdLaC9UTGpzUzJodUNtZmtoSVByMGJ5SnAveE1uOEgyZFNPcFBGQXJoTlAvZ2p3QitZWFhtU2txbmJEYjJaanlselFiUml0SjNFQmg4SHFhQUVEZHZkVHhuVVg3TXlSWUNRSFlTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab96b67-3bed-49f1-a220-f4840dc700c4", "record_id": "flaws_cloudtrail:0000048:aab96b67-3bed-49f1-a220-f4840dc700c4", "row_index": 48, "timestamp": "2019-08-10T22:35:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab96b67-3bed-49f1-a220-f4840dc700c4", "eventTime": "2019-08-10T22:35:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkZlBKWldoRytKYXVxS3VzL1BrYmJGWUdWa3RXTWZjR0p5QXVubmpqaHpzNEJlNFk2c3RhZ3BQVktTRFU1V2M4c1NhUXlLUEY5eFMzZWZQZkdkOGFDMjdJUU9TQmhlNmZwMCt6UklBNkdLaC9UTGpzUzJodUNtZmtoSVByMGJ5SnAveE1uOEgyZFNPcFBGQXJoTlAvZ2p3QitZWFhtU2txbmJEYjJaanlselFiUml0SjNFQmg4SHFhQUVEZHZkVHhuVVg3TXlSWUNRSFlTZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0a65c2c-700b-43bd-b447-e54ac56a98b1", "record_id": "flaws_cloudtrail:0000049:a0a65c2c-700b-43bd-b447-e54ac56a98b1", "row_index": 49, "timestamp": "2019-08-10T22:35:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0a65c2c-700b-43bd-b447-e54ac56a98b1", "eventTime": "2019-08-10T22:35:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkQStOTGRzOEpzMHNET1ZaNU5xVXAyZFh5UURkajNUWGZpcm14N01VSnlsQ1dRTUlhczIxUGRTQXRQMGRrMEpLMWdQcFprSFZXdldqaHdzL2pDdDJvS2JJbEVLQnBVWTlWYUZyTFFwVkxVVERuZGZIMU91aFZtbGh6aDh2TFMzL0lhelZrbDVIWFVMRnJjUmZ5N2xqRXZJVVpFVFVFcU9NbTQwZW1DaHVKUzBGcXdYeExTVG8rM2ZCTS9LYlZoVWpDcWs2R0k2TTl4Sk5xZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0a65c2c-700b-43bd-b447-e54ac56a98b1", "record_id": "flaws_cloudtrail:0000050:a0a65c2c-700b-43bd-b447-e54ac56a98b1", "row_index": 50, "timestamp": "2019-08-10T22:35:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0a65c2c-700b-43bd-b447-e54ac56a98b1", "eventTime": "2019-08-10T22:35:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkQStOTGRzOEpzMHNET1ZaNU5xVXAyZFh5UURkajNUWGZpcm14N01VSnlsQ1dRTUlhczIxUGRTQXRQMGRrMEpLMWdQcFprSFZXdldqaHdzL2pDdDJvS2JJbEVLQnBVWTlWYUZyTFFwVkxVVERuZGZIMU91aFZtbGh6aDh2TFMzL0lhelZrbDVIWFVMRnJjUmZ5N2xqRXZJVVpFVFVFcU9NbTQwZW1DaHVKUzBGcXdYeExTVG8rM2ZCTS9LYlZoVWpDcWs2R0k2TTl4Sk5xZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27fa1a4a-99de-4950-bb0e-88eee06062da", "record_id": "flaws_cloudtrail:0000051:27fa1a4a-99de-4950-bb0e-88eee06062da", "row_index": 51, "timestamp": "2019-08-10T22:35:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27fa1a4a-99de-4950-bb0e-88eee06062da", "eventTime": "2019-08-10T22:35:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQ2p1UHc1aUlzUGcxdzNaWUlveUluMFlrZ3pLVFFXK0VrZER4TlZwT0Mxek05ZkJ0SDQwQUtLbGk5T2JVRXZOUEh2a25ETGh6TGdSYXVuUGg0OURtRXZmR25hLzgyTk41SENpdmFpOUhNeDJIWk5LODZtMHlIRm12ZjhWL201STNQZWcrcDJySXhNVkVLSUp4TkM3bUlNN3BVWDNzeVhiS0hkdzdJUWhBU2U0ZHZxUWROcFA3V3dmZlQxYkJSbzg5U2RqenFuNkhTZVF5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27fa1a4a-99de-4950-bb0e-88eee06062da", "record_id": "flaws_cloudtrail:0000052:27fa1a4a-99de-4950-bb0e-88eee06062da", "row_index": 52, "timestamp": "2019-08-10T22:35:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27fa1a4a-99de-4950-bb0e-88eee06062da", "eventTime": "2019-08-10T22:35:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBQ2p1UHc1aUlzUGcxdzNaWUlveUluMFlrZ3pLVFFXK0VrZER4TlZwT0Mxek05ZkJ0SDQwQUtLbGk5T2JVRXZOUEh2a25ETGh6TGdSYXVuUGg0OURtRXZmR25hLzgyTk41SENpdmFpOUhNeDJIWk5LODZtMHlIRm12ZjhWL201STNQZWcrcDJySXhNVkVLSUp4TkM3bUlNN3BVWDNzeVhiS0hkdzdJUWhBU2U0ZHZxUWROcFA3V3dmZlQxYkJSbzg5U2RqenFuNkhTZVF5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf926766-911b-4443-8a2a-9e447b66b753", "record_id": "flaws_cloudtrail:0000053:ddf926766-911b-4443-8a2a-9e447b66b753", "row_index": 53, "timestamp": "2019-08-10T22:35:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf926766-911b-4443-8a2a-9e447b66b753", "eventTime": "2019-08-10T22:35:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCeFhSR2NXcXZoYjhFZWd0V1liK3paSFk5d20yOFRUSXJmbW13VVJtU2I0bUtjSXQzbkhEeFpSQTJlU2htMzJIRmZsSzg3RnRmOHdJVkw5L0FWZSsxUzI2U1BzZzY4VmdHdHpweVQvZ2cva0tGR29XcXdoWnk4VXNmQkxqWXJlUlhzT0VoSDRLcWRoZUxUeEhLRU1YS2Fac0ZFWCtYU3dLbkliWXZSSTVzeklMZDRpS05TbW55Z1RpTWwrWkwxM24wN1VST3N0MlBCSDRUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf926766-911b-4443-8a2a-9e447b66b753", "record_id": "flaws_cloudtrail:0000054:ddf926766-911b-4443-8a2a-9e447b66b753", "row_index": 54, "timestamp": "2019-08-10T22:35:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf926766-911b-4443-8a2a-9e447b66b753", "eventTime": "2019-08-10T22:35:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCeFhSR2NXcXZoYjhFZWd0V1liK3paSFk5d20yOFRUSXJmbW13VVJtU2I0bUtjSXQzbkhEeFpSQTJlU2htMzJIRmZsSzg3RnRmOHdJVkw5L0FWZSsxUzI2U1BzZzY4VmdHdHpweVQvZ2cva0tGR29XcXdoWnk4VXNmQkxqWXJlUlhzT0VoSDRLcWRoZUxUeEhLRU1YS2Fac0ZFWCtYU3dLbkliWXZSSTVzeklMZDRpS05TbW55Z1RpTWwrWkwxM24wN1VST3N0MlBCSDRUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf6f45b-59ed-486b-98c3-54e2f3e6bc82", "record_id": "flaws_cloudtrail:0000055:8bf6f45b-59ed-486b-98c3-54e2f3e6bc82", "row_index": 55, "timestamp": "2019-08-10T22:35:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf6f45b-59ed-486b-98c3-54e2f3e6bc82", "eventTime": "2019-08-10T22:35:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzbWoyczUyUUtYancyWjVhS2NlNXU0MEpGTzBNalZMUmJ2a3U0NHNSUkQ0ZndITGljTXJLOUpOWW1lL0tWM2ZXMHBOZkZUaHNMNy8vZW92angwN1BUcmlqWTZobWY2YW5VVzNVVkgvWVVzWkozTmpOZnlyNEVYaTR6ZzVpNkU2VUt1VTBPWTUzV3NxZUFFV29MQkdxaElYYk5IT3lzellFS01XL2JYUjZ2NWcvZWNCNGhBQkNXMWNFZHltOEMybzVabzVpQ3NkRmFqbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf6f45b-59ed-486b-98c3-54e2f3e6bc82", "record_id": "flaws_cloudtrail:0000056:8bf6f45b-59ed-486b-98c3-54e2f3e6bc82", "row_index": 56, "timestamp": "2019-08-10T22:35:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf6f45b-59ed-486b-98c3-54e2f3e6bc82", "eventTime": "2019-08-10T22:35:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzbWoyczUyUUtYancyWjVhS2NlNXU0MEpGTzBNalZMUmJ2a3U0NHNSUkQ0ZndITGljTXJLOUpOWW1lL0tWM2ZXMHBOZkZUaHNMNy8vZW92angwN1BUcmlqWTZobWY2YW5VVzNVVkgvWVVzWkozTmpOZnlyNEVYaTR6ZzVpNkU2VUt1VTBPWTUzV3NxZUFFV29MQkdxaElYYk5IT3lzellFS01XL2JYUjZ2NWcvZWNCNGhBQkNXMWNFZHltOEMybzVabzVpQ3NkRmFqbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19ce71c8-feb9-4e14-8932-66bb3409c966", "record_id": "flaws_cloudtrail:0000057:19ce71c8-feb9-4e14-8932-66bb3409c966", "row_index": 57, "timestamp": "2019-08-10T22:35:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19ce71c8-feb9-4e14-8932-66bb3409c966", "eventTime": "2019-08-10T22:35:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSS9MRXl3ZFZTTDM0QldFckdXalFqRGdPZ2U1Vk92RUpQaU9RSytLMmdCMTVTT3RkWm5LSlY4Mm40MWZnQVV0MHZMKzVGaXZBdmFXM1hEMUROeVFidy9MMjU5cUZIb1ZVaHFtVVhkMEtpQ1kzTG9ybmNYd3Fjc1pPdUxqWnExaHpWTHV3aVR0US9ub2c2VjVkazg2YVJON3NWdWhQWlNRTDlZcERreFkyUTh3ZlhKZDVVZjBqdk8yYjg2TUhCU1RWRGR2ZTBUOUVRY3BJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19ce71c8-feb9-4e14-8932-66bb3409c966", "record_id": "flaws_cloudtrail:0000058:19ce71c8-feb9-4e14-8932-66bb3409c966", "row_index": 58, "timestamp": "2019-08-10T22:35:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19ce71c8-feb9-4e14-8932-66bb3409c966", "eventTime": "2019-08-10T22:35:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSS9MRXl3ZFZTTDM0QldFckdXalFqRGdPZ2U1Vk92RUpQaU9RSytLMmdCMTVTT3RkWm5LSlY4Mm40MWZnQVV0MHZMKzVGaXZBdmFXM1hEMUROeVFidy9MMjU5cUZIb1ZVaHFtVVhkMEtpQ1kzTG9ybmNYd3Fjc1pPdUxqWnExaHpWTHV3aVR0US9ub2c2VjVkazg2YVJON3NWdWhQWlNRTDlZcERreFkyUTh3ZlhKZDVVZjBqdk8yYjg2TUhCU1RWRGR2ZTBUOUVRY3BJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "103c2cca-816e-4956-86d1-43b086b6de09", "record_id": "flaws_cloudtrail:0000059:103c2cca-816e-4956-86d1-43b086b6de09", "row_index": 59, "timestamp": "2019-08-10T22:35:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "103c2cca-816e-4956-86d1-43b086b6de09", "eventTime": "2019-08-10T22:35:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxSkRFeXZnVU1obVZyc1l3SjAxREhOVGEzOEJkcG5HZndXazcvV294SW1nandoSmxSRFFaYWpwNUlUY2JRM01jN3JLbjNQVGcvTTZ4WFgxT1JwSElpTXNUOWhJRThYUkU4ZUhvdU5JQWRHUWVpVWZnTXBTU0dPZ2FBWnpxaXpQeGI5amI3UkZlTFJhYWJaMzhEUUtWdnVnbis1MmxHN05CVU5pdjAwMGlKcVg5blR5QW4vWk8wQ1ZRNjUrUUMwd0J3dWpQNEJROXhmSDNOZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "103c2cca-816e-4956-86d1-43b086b6de09", "record_id": "flaws_cloudtrail:0000060:103c2cca-816e-4956-86d1-43b086b6de09", "row_index": 60, "timestamp": "2019-08-10T22:35:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "103c2cca-816e-4956-86d1-43b086b6de09", "eventTime": "2019-08-10T22:35:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxSkRFeXZnVU1obVZyc1l3SjAxREhOVGEzOEJkcG5HZndXazcvV294SW1nandoSmxSRFFaYWpwNUlUY2JRM01jN3JLbjNQVGcvTTZ4WFgxT1JwSElpTXNUOWhJRThYUkU4ZUhvdU5JQWRHUWVpVWZnTXBTU0dPZ2FBWnpxaXpQeGI5amI3UkZlTFJhYWJaMzhEUUtWdnVnbis1MmxHN05CVU5pdjAwMGlKcVg5blR5QW4vWk8wQ1ZRNjUrUUMwd0J3dWpQNEJROXhmSDNOZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3ebbca-4596-4229-b9b3-e266fc204b10", "record_id": "flaws_cloudtrail:0000061:ac3ebbca-4596-4229-b9b3-e266fc204b10", "row_index": 61, "timestamp": "2019-08-10T22:35:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3ebbca-4596-4229-b9b3-e266fc204b10", "eventTime": "2019-08-10T22:35:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMZnRudENkSUpQZHE4V0NyZzhPbkRySGpDOE10ZkpDMWhSSm0xMXlIVW1vY3dnM0J1a1B3NWxEUVdxa3pBUENBdzJta295TGV1RmNsVXBkNlhuaUp6RnA3RmNWNEpRbDlMVnZ6K3psTlU3c21UTWJWKzY3RzlZcml3SStzODNqSTk4elpqUjR5Q2pYTmgydDBVZVBTa1U4Sk9udXNpNnBSb25OUzBVdk53VFZNNzdlNUJSdFRGRGpiWENNN2IwcW5PajFRdjMzVW53PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3ebbca-4596-4229-b9b3-e266fc204b10", "record_id": "flaws_cloudtrail:0000062:ac3ebbca-4596-4229-b9b3-e266fc204b10", "row_index": 62, "timestamp": "2019-08-10T22:35:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3ebbca-4596-4229-b9b3-e266fc204b10", "eventTime": "2019-08-10T22:35:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMZnRudENkSUpQZHE4V0NyZzhPbkRySGpDOE10ZkpDMWhSSm0xMXlIVW1vY3dnM0J1a1B3NWxEUVdxa3pBUENBdzJta295TGV1RmNsVXBkNlhuaUp6RnA3RmNWNEpRbDlMVnZ6K3psTlU3c21UTWJWKzY3RzlZcml3SStzODNqSTk4elpqUjR5Q2pYTmgydDBVZVBTa1U4Sk9udXNpNnBSb25OUzBVdk53VFZNNzdlNUJSdFRGRGpiWENNN2IwcW5PajFRdjMzVW53PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4798c2a8-b9f6-4417-a115-7b178114fff", "record_id": "flaws_cloudtrail:0000063:4798c2a8-b9f6-4417-a115-7b178114fff", "row_index": 63, "timestamp": "2019-08-10T22:35:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4798c2a8-b9f6-4417-a115-7b178114fff", "eventTime": "2019-08-10T22:35:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBNTE0QUZZR1NuZ05IaTA5c0pxLytSVTFtZm5SQ1gvSlM3eURNN2p5bFdiNE5uU0lnclErMmxiUTZkMUlhVTIzVEZJbUdWYk9lRmFDSHJkUFpPQythMk5VbWxxelpZODBoS3ZiVkNxYldJbWM0Vzd4enNTSE1MYUVGYkQ2TkFaNllSSTdhUzlabFRpdUhkcWpPaVNLM0I5WGg5WUNzcGhNdFdaeVQ4SmhzelFJeUZTVEFsSFM4MGsrZXJXektScS9QOXVGQzh3WnpEVTJPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4798c2a8-b9f6-4417-a115-7b178114fff", "record_id": "flaws_cloudtrail:0000064:4798c2a8-b9f6-4417-a115-7b178114fff", "row_index": 64, "timestamp": "2019-08-10T22:35:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4798c2a8-b9f6-4417-a115-7b178114fff", "eventTime": "2019-08-10T22:35:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBNTE0QUZZR1NuZ05IaTA5c0pxLytSVTFtZm5SQ1gvSlM3eURNN2p5bFdiNE5uU0lnclErMmxiUTZkMUlhVTIzVEZJbUdWYk9lRmFDSHJkUFpPQythMk5VbWxxelpZODBoS3ZiVkNxYldJbWM0Vzd4enNTSE1MYUVGYkQ2TkFaNllSSTdhUzlabFRpdUhkcWpPaVNLM0I5WGg5WUNzcGhNdFdaeVQ4SmhzelFJeUZTVEFsSFM4MGsrZXJXektScS9QOXVGQzh3WnpEVTJPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a536c587-82c6-48f8-80e3-a2e88c97837c", "record_id": "flaws_cloudtrail:0000065:a536c587-82c6-48f8-80e3-a2e88c97837c", "row_index": 65, "timestamp": "2019-08-10T22:35:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a536c587-82c6-48f8-80e3-a2e88c97837c", "eventTime": "2019-08-10T22:35:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNVVRnREkyeWpYWWxsOFVIbitxU3V4M1htTFJMekxET2w1aG5UZ3Bid0kxZmIybjZhbU9Ob3BtVXV2YU1nVjdwQitacmhhcEU3TDcxTHgydnNhQ1BCT053cWR5OG1BSFl0Ym5rVTVSM0krdy9SVGloYUNTczg3ZmRKZGVWTHFMYXJSdzUrUjFPbDEyTENxY0xOVzl3cFlKZEpRbjA5RnlqTVgyZktpaXpWQUQzWE1Td3NIcVZwSk9UMDFYWGFTbmplblV5anFLWGtITzZ5V3ZKbHRlZzRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1455d677-09cf-4195-8cf9-51e0b2b416ef", "record_id": "flaws_cloudtrail:0000066:1455d677-09cf-4195-8cf9-51e0b2b416ef", "row_index": 66, "timestamp": "2019-08-10T22:35:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1455d677-09cf-4195-8cf9-51e0b2b416ef", "eventTime": "2019-08-10T22:35:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPY044Zm1PdHdxZVNvS0NYV2g2VjRaZEhma1BYMG16V3haZ0ppeVBOYit0WldSZEZLV3Nsc3ZQd2xFWExOREJFQWpWZ3VXb2NPN3p0MEJVZklVQ0ZKMWF0dWw1em93bW96Y2JWSjNQVUhGSW9KMlBrM2NGc0V6aVFOT0psOVN2NUJUdEtCbEQrQkhrd1F4U1BMRnBhcFhqZ0NVbEZHQTlyeUhhbjI5bHFOekhXbmYzdm1GdlJJSjVXenQybXY1WnNMZmxyS0lINDVOWk9Id1pYNnVwUnZBMEFhUEZNWmxrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a536c587-82c6-48f8-80e3-a2e88c97837c", "record_id": "flaws_cloudtrail:0000067:a536c587-82c6-48f8-80e3-a2e88c97837c", "row_index": 67, "timestamp": "2019-08-10T22:35:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a536c587-82c6-48f8-80e3-a2e88c97837c", "eventTime": "2019-08-10T22:35:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNVVRnREkyeWpYWWxsOFVIbitxU3V4M1htTFJMekxET2w1aG5UZ3Bid0kxZmIybjZhbU9Ob3BtVXV2YU1nVjdwQitacmhhcEU3TDcxTHgydnNhQ1BCT053cWR5OG1BSFl0Ym5rVTVSM0krdy9SVGloYUNTczg3ZmRKZGVWTHFMYXJSdzUrUjFPbDEyTENxY0xOVzl3cFlKZEpRbjA5RnlqTVgyZktpaXpWQUQzWE1Td3NIcVZwSk9UMDFYWGFTbmplblV5anFLWGtITzZ5V3ZKbHRlZzRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1455d677-09cf-4195-8cf9-51e0b2b416ef", "record_id": "flaws_cloudtrail:0000068:1455d677-09cf-4195-8cf9-51e0b2b416ef", "row_index": 68, "timestamp": "2019-08-10T22:35:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1455d677-09cf-4195-8cf9-51e0b2b416ef", "eventTime": "2019-08-10T22:35:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPY044Zm1PdHdxZVNvS0NYV2g2VjRaZEhma1BYMG16V3haZ0ppeVBOYit0WldSZEZLV3Nsc3ZQd2xFWExOREJFQWpWZ3VXb2NPN3p0MEJVZklVQ0ZKMWF0dWw1em93bW96Y2JWSjNQVUhGSW9KMlBrM2NGc0V6aVFOT0psOVN2NUJUdEtCbEQrQkhrd1F4U1BMRnBhcFhqZ0NVbEZHQTlyeUhhbjI5bHFOekhXbmYzdm1GdlJJSjVXenQybXY1WnNMZmxyS0lINDVOWk9Id1pYNnVwUnZBMEFhUEZNWmxrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fbefff7-dba3-4cef-9c51-3359e2fa8d28", "record_id": "flaws_cloudtrail:0000069:9fbefff7-dba3-4cef-9c51-3359e2fa8d28", "row_index": 69, "timestamp": "2019-08-10T22:35:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fbefff7-dba3-4cef-9c51-3359e2fa8d28", "eventTime": "2019-08-10T22:35:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzeTUzdzd3ZGcrZVBxdEJwMVpZY1NNK1FmR0hSOXUwcDhHZGxKK2dqWWVNdU5rd3IzV2FpODdsTytkUGFCSWlBSUdDODJ6YU0yenVBcitzTzZLYlhKV3JwQ2JtcDBBVTNYTGhuZUZlV3VNMzE2RzRwdlJEeVJkNStDb1NScGwveVIzUnVpTmt0cWpTN01WV1AvOGdpcW5zQVd0RHVTbzFTSDNhaE5ja3BWWUQralhqdkZ1SGlzL2kxYnlMdkhkSEpxR2NUVGxMT1dEemgwS2gvZzR3VlA3MkhSZFdRVXBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fbefff7-dba3-4cef-9c51-3359e2fa8d28", "record_id": "flaws_cloudtrail:0000070:9fbefff7-dba3-4cef-9c51-3359e2fa8d28", "row_index": 70, "timestamp": "2019-08-10T22:35:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fbefff7-dba3-4cef-9c51-3359e2fa8d28", "eventTime": "2019-08-10T22:35:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzeTUzdzd3ZGcrZVBxdEJwMVpZY1NNK1FmR0hSOXUwcDhHZGxKK2dqWWVNdU5rd3IzV2FpODdsTytkUGFCSWlBSUdDODJ6YU0yenVBcitzTzZLYlhKV3JwQ2JtcDBBVTNYTGhuZUZlV3VNMzE2RzRwdlJEeVJkNStDb1NScGwveVIzUnVpTmt0cWpTN01WV1AvOGdpcW5zQVd0RHVTbzFTSDNhaE5ja3BWWUQralhqdkZ1SGlzL2kxYnlMdkhkSEpxR2NUVGxMT1dEemgwS2gvZzR3VlA3MkhSZFdRVXBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3a4418a-5085-4435-88ed-18f7fe0b39d8", "record_id": "flaws_cloudtrail:0000071:d3a4418a-5085-4435-88ed-18f7fe0b39d8", "row_index": 71, "timestamp": "2019-08-10T22:35:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3a4418a-5085-4435-88ed-18f7fe0b39d8", "eventTime": "2019-08-10T22:35:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzL2FJRUlYaG5rQXNhQTVEN29PUUNRWUp2a0loNGd4Sk1ST001TURYeHB1eFpRVGdjMHp6RWlrUklXdlJwMW1rc2NZbHUzcVpQaC9ibTd2T0h4d1FVVjRNd3dPTDRXU3BxZjBBZFJkMzU3V3BXUmtkelB4RFF0ZGxpVmkyaGxhekl2L3pkRjNxekFPazFuSG5CRkpKUFhCVEJyK3NxWFRFaGJIeW9FbDVremhXTzBqZ0orS2pER0hSM1d5a3BWZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3a4418a-5085-4435-88ed-18f7fe0b39d8", "record_id": "flaws_cloudtrail:0000072:d3a4418a-5085-4435-88ed-18f7fe0b39d8", "row_index": 72, "timestamp": "2019-08-10T22:35:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3a4418a-5085-4435-88ed-18f7fe0b39d8", "eventTime": "2019-08-10T22:35:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzL2FJRUlYaG5rQXNhQTVEN29PUUNRWUp2a0loNGd4Sk1ST001TURYeHB1eFpRVGdjMHp6RWlrUklXdlJwMW1rc2NZbHUzcVpQaC9ibTd2T0h4d1FVVjRNd3dPTDRXU3BxZjBBZFJkMzU3V3BXUmtkelB4RFF0ZGxpVmkyaGxhekl2L3pkRjNxekFPazFuSG5CRkpKUFhCVEJyK3NxWFRFaGJIeW9FbDVremhXTzBqZ0orS2pER0hSM1d5a3BWZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892d4ac5-a182-48ab-9dac-7c3c551867ee", "record_id": "flaws_cloudtrail:0000073:892d4ac5-a182-48ab-9dac-7c3c551867ee", "row_index": 73, "timestamp": "2019-08-10T22:35:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892d4ac5-a182-48ab-9dac-7c3c551867ee", "eventTime": "2019-08-10T22:35:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrcy9JdHNpa09tSHhlRVl1SEJIMTJSMkwvRU9UaVoxOWpwTld6cTIwRWlCa0tUUnNQM2RCcDE5NnFadElaUk44Z291Qlg0dUJyYzkydndhMnBIUjFtdlY3UTgrZjIrWlR6WU1KT3JzclR0K1I0bFJBMURzV2ZId2RaZm9IUGpWeFAyRlhQNjVOQWxmZkNtQVJGblRIc084V0ZuSXg5MU9kdE1wM0xNMFBNQ3FmQWZaYnFhVVJsdHVmK01NOUYzakVrK2xseENtcE1WNytVTHBKMHZLV1FWT1oxb1B2b2FJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e32d9d-dbe1-420a-bd1b-af5128f995e6", "record_id": "flaws_cloudtrail:0000074:84e32d9d-dbe1-420a-bd1b-af5128f995e6", "row_index": 74, "timestamp": "2019-08-10T22:35:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e32d9d-dbe1-420a-bd1b-af5128f995e6", "eventTime": "2019-08-10T22:35:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwTW9nMWRqejduUzlOTit5REtuUzVTUVhoRGlCQzBkeVdvbnFjVHFNRVZubnlWKzZ4M0J1WlFXdEZDYmt3MlprTGNJQmtJVlI5aHlieDlFaGgxWFBhZFc5UE1TWDhNaUJJejU2NXRMZkFjUHlwRmkzU1p4UUc0azFIekxndERKSExBMFc5ZkprOXVWUlp5NGZRTTFFcU5ycDVuVlEwTzZ2RTRqYkk0QlBvbXV2M1AzNi9xc2lMcnY3aVlSOEFGcUNtMDlQNEhzZGRJaHBHV21pZ21zVnhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892d4ac5-a182-48ab-9dac-7c3c551867ee", "record_id": "flaws_cloudtrail:0000075:892d4ac5-a182-48ab-9dac-7c3c551867ee", "row_index": 75, "timestamp": "2019-08-10T22:35:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892d4ac5-a182-48ab-9dac-7c3c551867ee", "eventTime": "2019-08-10T22:35:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrcy9JdHNpa09tSHhlRVl1SEJIMTJSMkwvRU9UaVoxOWpwTld6cTIwRWlCa0tUUnNQM2RCcDE5NnFadElaUk44Z291Qlg0dUJyYzkydndhMnBIUjFtdlY3UTgrZjIrWlR6WU1KT3JzclR0K1I0bFJBMURzV2ZId2RaZm9IUGpWeFAyRlhQNjVOQWxmZkNtQVJGblRIc084V0ZuSXg5MU9kdE1wM0xNMFBNQ3FmQWZaYnFhVVJsdHVmK01NOUYzakVrK2xseENtcE1WNytVTHBKMHZLV1FWT1oxb1B2b2FJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e32d9d-dbe1-420a-bd1b-af5128f995e6", "record_id": "flaws_cloudtrail:0000076:84e32d9d-dbe1-420a-bd1b-af5128f995e6", "row_index": 76, "timestamp": "2019-08-10T22:35:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e32d9d-dbe1-420a-bd1b-af5128f995e6", "eventTime": "2019-08-10T22:35:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwTW9nMWRqejduUzlOTit5REtuUzVTUVhoRGlCQzBkeVdvbnFjVHFNRVZubnlWKzZ4M0J1WlFXdEZDYmt3MlprTGNJQmtJVlI5aHlieDlFaGgxWFBhZFc5UE1TWDhNaUJJejU2NXRMZkFjUHlwRmkzU1p4UUc0azFIekxndERKSExBMFc5ZkprOXVWUlp5NGZRTTFFcU5ycDVuVlEwTzZ2RTRqYkk0QlBvbXV2M1AzNi9xc2lMcnY3aVlSOEFGcUNtMDlQNEhzZGRJaHBHV21pZ21zVnhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6f16c5-7d6a-4284-89e1-221c90db5623", "record_id": "flaws_cloudtrail:0000077:bd6f16c5-7d6a-4284-89e1-221c90db5623", "row_index": 77, "timestamp": "2019-08-10T22:35:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6f16c5-7d6a-4284-89e1-221c90db5623", "eventTime": "2019-08-10T22:35:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFU1hLSytJcUxPbDJSNXdFZmpHTmkyVVU3UWV1VmhKMjVYemV1bTVkLyswNzczbGttL01idXczSzViZ3pBZFJNMUJnbkFXczVoV0FGZ2dKYXFnZ3doU3Z3RHR1RU1CVUw4b0lyVDRmc0Fza3RxSmhlR2Y0TVN3cFhpZW5TR1RrMmNzOStmSUNhNFBUSlpEc3l5R2VQemdjZjVNNVZpM05GSnJ6dHd2R2M1b1hKTzBEN2czVmRoN2tkcmx5aTljaEtaWEFkNUttRGtTbFY1WkhyVUVDY1FUY09KWkJJcnRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fb8652b-dd1d-43b9-91a6-de0aed761bda", "record_id": "flaws_cloudtrail:0000078:7fb8652b-dd1d-43b9-91a6-de0aed761bda", "row_index": 78, "timestamp": "2019-08-10T22:35:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fb8652b-dd1d-43b9-91a6-de0aed761bda", "eventTime": "2019-08-10T22:35:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWFBaQ0w3S3psS0xnUFdRTnFnVHFKNFBYejRIbG5BcTVwd1V2aDFyM0tkeVdsVTdITUVIL1QwbWdObExZc0hQQ3lRWEVzNUl1bld2cm55NndtbTQvckh5bWE1ZEJFRVVFV1Q0eVlSNmxTeDFuVVNqRU1YODdCWlZXeXJZSVRuWDNNcW5TQzNva2U3YldZazEvSFIxMlpwbFEzeGdHbFJMTGVPa3dJeEZkeEM4SEZmczRNS0drL1VtdHRTTUNZaVJhcmJLa3pYVTRaaTdYTk9qWEg3TTR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6f16c5-7d6a-4284-89e1-221c90db5623", "record_id": "flaws_cloudtrail:0000079:bd6f16c5-7d6a-4284-89e1-221c90db5623", "row_index": 79, "timestamp": "2019-08-10T22:35:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6f16c5-7d6a-4284-89e1-221c90db5623", "eventTime": "2019-08-10T22:35:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFU1hLSytJcUxPbDJSNXdFZmpHTmkyVVU3UWV1VmhKMjVYemV1bTVkLyswNzczbGttL01idXczSzViZ3pBZFJNMUJnbkFXczVoV0FGZ2dKYXFnZ3doU3Z3RHR1RU1CVUw4b0lyVDRmc0Fza3RxSmhlR2Y0TVN3cFhpZW5TR1RrMmNzOStmSUNhNFBUSlpEc3l5R2VQemdjZjVNNVZpM05GSnJ6dHd2R2M1b1hKTzBEN2czVmRoN2tkcmx5aTljaEtaWEFkNUttRGtTbFY1WkhyVUVDY1FUY09KWkJJcnRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fb8652b-dd1d-43b9-91a6-de0aed761bda", "record_id": "flaws_cloudtrail:0000080:7fb8652b-dd1d-43b9-91a6-de0aed761bda", "row_index": 80, "timestamp": "2019-08-10T22:35:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fb8652b-dd1d-43b9-91a6-de0aed761bda", "eventTime": "2019-08-10T22:35:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWFBaQ0w3S3psS0xnUFdRTnFnVHFKNFBYejRIbG5BcTVwd1V2aDFyM0tkeVdsVTdITUVIL1QwbWdObExZc0hQQ3lRWEVzNUl1bld2cm55NndtbTQvckh5bWE1ZEJFRVVFV1Q0eVlSNmxTeDFuVVNqRU1YODdCWlZXeXJZSVRuWDNNcW5TQzNva2U3YldZazEvSFIxMlpwbFEzeGdHbFJMTGVPa3dJeEZkeEM4SEZmczRNS0drL1VtdHRTTUNZaVJhcmJLa3pYVTRaaTdYTk9qWEg3TTR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316749ae-96c7-4f2c-ad6d-3361074fa0a8", "record_id": "flaws_cloudtrail:0000081:316749ae-96c7-4f2c-ad6d-3361074fa0a8", "row_index": 81, "timestamp": "2019-08-10T22:35:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316749ae-96c7-4f2c-ad6d-3361074fa0a8", "eventTime": "2019-08-10T22:35:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGemc4SUsxQ05JS3Bramhla1lqMEJ4Tk1SZTV2dkNGRlNPbFk4SENYMUIrY1ZTOS9PaXAvcnVpWDZVb2RXTjhGRmQwcWtxL3BQclRhV1hnMmZ1bHNlL3hKdzIwRXlnSnBCREF4Vmtsd0hmR1k5Yms2NVBsT0JPcjJZOTdhMDlGeEo3clFkbDk3VGNkMGZhdHMxN2U5SkVVOEZ2akdOZFpYbktIcWk3UmRFMk40akFTcnMrcWVLa0ZOV0ZVS1R4TGtoSG5EdDVMZDE2ZFBVRXZza3NwUXB3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1896e037-1ed4-48b4-bead-05eefff8e9ed", "record_id": "flaws_cloudtrail:0000082:1896e037-1ed4-48b4-bead-05eefff8e9ed", "row_index": 82, "timestamp": "2019-08-10T22:35:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1896e037-1ed4-48b4-bead-05eefff8e9ed", "eventTime": "2019-08-10T22:35:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhakNsZWw0S0pycm5oZFppNGdTZlYvOEVpVVIyK2tnYUVwLzJkalRYRmJoZzZEOE1hR3pQRjFUZndGOWh2dmpiZVlZVllUSC9NdTlxRlF6QVJYOGo3QVdMV2RWTFFLUU15cGlpdlI0eDZCcmU1RUxMclNUNUVUbm5EOXQvUitGRVJheXU5ei9IN2JlbG0wcmtBYlJ2b1dRYkhVOWVWVFhBajhCcUlOWHIwM3JrU2x0QzBFS1JWQ1pKMEdmNTBKZ3pzTjd6blVkdHJMREhUa3BPdTR6dnFKSWV1ZVNvbGM4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316749ae-96c7-4f2c-ad6d-3361074fa0a8", "record_id": "flaws_cloudtrail:0000083:316749ae-96c7-4f2c-ad6d-3361074fa0a8", "row_index": 83, "timestamp": "2019-08-10T22:35:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316749ae-96c7-4f2c-ad6d-3361074fa0a8", "eventTime": "2019-08-10T22:35:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGemc4SUsxQ05JS3Bramhla1lqMEJ4Tk1SZTV2dkNGRlNPbFk4SENYMUIrY1ZTOS9PaXAvcnVpWDZVb2RXTjhGRmQwcWtxL3BQclRhV1hnMmZ1bHNlL3hKdzIwRXlnSnBCREF4Vmtsd0hmR1k5Yms2NVBsT0JPcjJZOTdhMDlGeEo3clFkbDk3VGNkMGZhdHMxN2U5SkVVOEZ2akdOZFpYbktIcWk3UmRFMk40akFTcnMrcWVLa0ZOV0ZVS1R4TGtoSG5EdDVMZDE2ZFBVRXZza3NwUXB3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1896e037-1ed4-48b4-bead-05eefff8e9ed", "record_id": "flaws_cloudtrail:0000084:1896e037-1ed4-48b4-bead-05eefff8e9ed", "row_index": 84, "timestamp": "2019-08-10T22:35:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1896e037-1ed4-48b4-bead-05eefff8e9ed", "eventTime": "2019-08-10T22:35:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhakNsZWw0S0pycm5oZFppNGdTZlYvOEVpVVIyK2tnYUVwLzJkalRYRmJoZzZEOE1hR3pQRjFUZndGOWh2dmpiZVlZVllUSC9NdTlxRlF6QVJYOGo3QVdMV2RWTFFLUU15cGlpdlI0eDZCcmU1RUxMclNUNUVUbm5EOXQvUitGRVJheXU5ei9IN2JlbG0wcmtBYlJ2b1dRYkhVOWVWVFhBajhCcUlOWHIwM3JrU2x0QzBFS1JWQ1pKMEdmNTBKZ3pzTjd6blVkdHJMREhUa3BPdTR6dnFKSWV1ZVNvbGM4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27ef04ff-3bc4-4e4d-900a-eb7bb649b2b3", "record_id": "flaws_cloudtrail:0000085:27ef04ff-3bc4-4e4d-900a-eb7bb649b2b3", "row_index": 85, "timestamp": "2019-08-10T22:37:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27ef04ff-3bc4-4e4d-900a-eb7bb649b2b3", "eventTime": "2019-08-10T22:37:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27ef04ff-3bc4-4e4d-900a-eb7bb649b2b3", "record_id": "flaws_cloudtrail:0000086:27ef04ff-3bc4-4e4d-900a-eb7bb649b2b3", "row_index": 86, "timestamp": "2019-08-10T22:37:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27ef04ff-3bc4-4e4d-900a-eb7bb649b2b3", "eventTime": "2019-08-10T22:37:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553adcd5-e774-4926-aa61-b5207d5b2ef2", "record_id": "flaws_cloudtrail:0000087:553adcd5-e774-4926-aa61-b5207d5b2ef2", "row_index": 87, "timestamp": "2019-08-10T22:38:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553adcd5-e774-4926-aa61-b5207d5b2ef2", "eventTime": "2019-08-10T22:38:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553adcd5-e774-4926-aa61-b5207d5b2ef2", "record_id": "flaws_cloudtrail:0000088:553adcd5-e774-4926-aa61-b5207d5b2ef2", "row_index": 88, "timestamp": "2019-08-10T22:38:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553adcd5-e774-4926-aa61-b5207d5b2ef2", "eventTime": "2019-08-10T22:38:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd73bc9a-9e4e-49dd-9fef-990c431bbce3", "record_id": "flaws_cloudtrail:0000089:bd73bc9a-9e4e-49dd-9fef-990c431bbce3", "row_index": 89, "timestamp": "2019-08-10T22:44:07Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd73bc9a-9e4e-49dd-9fef-990c431bbce3", "eventTime": "2019-08-10T22:44:07Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd73bc9a-9e4e-49dd-9fef-990c431bbce3", "record_id": "flaws_cloudtrail:0000090:bd73bc9a-9e4e-49dd-9fef-990c431bbce3", "row_index": 90, "timestamp": "2019-08-10T22:44:07Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd73bc9a-9e4e-49dd-9fef-990c431bbce3", "eventTime": "2019-08-10T22:44:07Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33544e-d449-4668-bed5-dc9fd2c884c8", "record_id": "flaws_cloudtrail:0000091:33544e-d449-4668-bed5-dc9fd2c884c8", "row_index": 91, "timestamp": "2019-08-10T22:44:16Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33544e-d449-4668-bed5-dc9fd2c884c8", "eventTime": "2019-08-10T22:44:16Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-1' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33544e-d449-4668-bed5-dc9fd2c884c8", "record_id": "flaws_cloudtrail:0000092:33544e-d449-4668-bed5-dc9fd2c884c8", "row_index": 92, "timestamp": "2019-08-10T22:44:16Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33544e-d449-4668-bed5-dc9fd2c884c8", "eventTime": "2019-08-10T22:44:16Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-1' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc5ac330-da3f-4908-b13e-7dfd9cf01637", "record_id": "flaws_cloudtrail:0000093:bc5ac330-da3f-4908-b13e-7dfd9cf01637", "row_index": 93, "timestamp": "2019-08-10T22:44:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc5ac330-da3f-4908-b13e-7dfd9cf01637", "eventTime": "2019-08-10T22:44:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc5ac330-da3f-4908-b13e-7dfd9cf01637", "record_id": "flaws_cloudtrail:0000094:bc5ac330-da3f-4908-b13e-7dfd9cf01637", "row_index": 94, "timestamp": "2019-08-10T22:44:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc5ac330-da3f-4908-b13e-7dfd9cf01637", "eventTime": "2019-08-10T22:44:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af4154ee-d30c-4781-9739-933bab41b77e", "record_id": "flaws_cloudtrail:0000095:af4154ee-d30c-4781-9739-933bab41b77e", "row_index": 95, "timestamp": "2019-08-10T22:44:27Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af4154ee-d30c-4781-9739-933bab41b77e", "eventTime": "2019-08-10T22:44:27Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west1' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af4154ee-d30c-4781-9739-933bab41b77e", "record_id": "flaws_cloudtrail:0000096:af4154ee-d30c-4781-9739-933bab41b77e", "row_index": 96, "timestamp": "2019-08-10T22:44:27Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af4154ee-d30c-4781-9739-933bab41b77e", "eventTime": "2019-08-10T22:44:27Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west1' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff0ae7f5-6fa3-4788-a163-7e3715ed00fa", "record_id": "flaws_cloudtrail:0000097:ff0ae7f5-6fa3-4788-a163-7e3715ed00fa", "row_index": 97, "timestamp": "2019-08-10T22:44:29Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff0ae7f5-6fa3-4788-a163-7e3715ed00fa", "eventTime": "2019-08-10T22:44:29Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff0ae7f5-6fa3-4788-a163-7e3715ed00fa", "record_id": "flaws_cloudtrail:0000098:ff0ae7f5-6fa3-4788-a163-7e3715ed00fa", "row_index": 98, "timestamp": "2019-08-10T22:44:29Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff0ae7f5-6fa3-4788-a163-7e3715ed00fa", "eventTime": "2019-08-10T22:44:29Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee276568f-9fa6-457a-b0aa-f171dda06ce1", "record_id": "flaws_cloudtrail:0000099:ee276568f-9fa6-457a-b0aa-f171dda06ce1", "row_index": 99, "timestamp": "2019-08-10T22:44:43Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee276568f-9fa6-457a-b0aa-f171dda06ce1", "eventTime": "2019-08-10T22:44:43Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee276568f-9fa6-457a-b0aa-f171dda06ce1", "record_id": "flaws_cloudtrail:0000100:ee276568f-9fa6-457a-b0aa-f171dda06ce1", "row_index": 100, "timestamp": "2019-08-10T22:44:43Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee276568f-9fa6-457a-b0aa-f171dda06ce1", "eventTime": "2019-08-10T22:44:43Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-east-1a' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-east-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86df0f62-6ae0-4331-be58-38f9e098ddb8", "record_id": "flaws_cloudtrail:0000101:86df0f62-6ae0-4331-be58-38f9e098ddb8", "row_index": 101, "timestamp": "2019-08-10T22:44:54Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86df0f62-6ae0-4331-be58-38f9e098ddb8", "eventTime": "2019-08-10T22:44:54Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tZLRap5s7uBTix9iLT5uC12_e7avVEMPRM6cyhISw4hfkgJTIpKKCKtrl91WscNuZ8o6n99opjPm7ziG3gkAyHeanNPWm7wIFByMcWPfrw-pjz1dYam575xPdKboyzaFSKbr8nxyxun5_cW3zlTOs0t0AyeIZKVtqDufxxM8mcYtjCzXzS0aYhUmcbFG9GgPIHh0y98I44Wk5Ffp4NCTWK9iHxFiIWaaY5QwlKimubv89ZLFjeRywIZNVjCUUJv7rslgGNEY4ZKMPcWBc72JRneQW7QQTLCkBl36SsTKAyIy3SstVI12XFRhTugcDFsG7al8SqxJQTbwm4w4XT8zcjdjhUJllYptwiZKKuzlOg-s3fgwK9nlRo3loX2rn9HI5vDP1eMm-yO6ComumvSr9LHZ4z1gnKpfRgCxhhyhTLEoJFhpEWZC9y4HTUQTHeyl5EvTTiICCCOnn-B4EFZorC8ME7ySx9OtTosMzdQNjXBgI7bYlI8KuAiLMuhCxTgZQ7TlBjOuNhJD4-GRhVdFWxkq_lhlKjstjS82XEcXTwBnEX5YsWv_TqrfgtZEazpyrDB8tFuFmIcT7qXRwDZVDKrlXil9EOZ1bgDdsYRvhxCcA59y0u-twtBzSEMcqab4Ih-Crg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86df0f62-6ae0-4331-be58-38f9e098ddb8", "record_id": "flaws_cloudtrail:0000102:86df0f62-6ae0-4331-be58-38f9e098ddb8", "row_index": 102, "timestamp": "2019-08-10T22:44:54Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "52.7.177.226", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86df0f62-6ae0-4331-be58-38f9e098ddb8", "eventTime": "2019-08-10T22:44:54Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "52.7.177.226", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tZLRap5s7uBTix9iLT5uC12_e7avVEMPRM6cyhISw4hfkgJTIpKKCKtrl91WscNuZ8o6n99opjPm7ziG3gkAyHeanNPWm7wIFByMcWPfrw-pjz1dYam575xPdKboyzaFSKbr8nxyxun5_cW3zlTOs0t0AyeIZKVtqDufxxM8mcYtjCzXzS0aYhUmcbFG9GgPIHh0y98I44Wk5Ffp4NCTWK9iHxFiIWaaY5QwlKimubv89ZLFjeRywIZNVjCUUJv7rslgGNEY4ZKMPcWBc72JRneQW7QQTLCkBl36SsTKAyIy3SstVI12XFRhTugcDFsG7al8SqxJQTbwm4w4XT8zcjdjhUJllYptwiZKKuzlOg-s3fgwK9nlRo3loX2rn9HI5vDP1eMm-yO6ComumvSr9LHZ4z1gnKpfRgCxhhyhTLEoJFhpEWZC9y4HTUQTHeyl5EvTTiICCCOnn-B4EFZorC8ME7ySx9OtTosMzdQNjXBgI7bYlI8KuAiLMuhCxTgZQ7TlBjOuNhJD4-GRhVdFWxkq_lhlKjstjS82XEcXTwBnEX5YsWv_TqrfgtZEazpyrDB8tFuFmIcT7qXRwDZVDKrlXil9EOZ1bgDdsYRvhxCcA59y0u-twtBzSEMcqab4Ih-Crg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edd519a8-9d8a-4c36-9388-131e1800d70a", "record_id": "flaws_cloudtrail:0000103:edd519a8-9d8a-4c36-9388-131e1800d70a", "row_index": 103, "timestamp": "2019-08-10T23:28:40Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1218, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edd519a8-9d8a-4c36-9388-131e1800d70a", "eventTime": "2019-08-10T23:28:40Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edd519a8-9d8a-4c36-9388-131e1800d70a", "record_id": "flaws_cloudtrail:0000104:edd519a8-9d8a-4c36-9388-131e1800d70a", "row_index": 104, "timestamp": "2019-08-10T23:28:40Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1218, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edd519a8-9d8a-4c36-9388-131e1800d70a", "eventTime": "2019-08-10T23:28:40Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0db5677-6ce0-4f42-8c19-faf887cbc0e1", "record_id": "flaws_cloudtrail:0000105:c0db5677-6ce0-4f42-8c19-faf887cbc0e1", "row_index": 105, "timestamp": "2019-08-10T23:28:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0db5677-6ce0-4f42-8c19-faf887cbc0e1", "eventTime": "2019-08-10T23:28:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0db5677-6ce0-4f42-8c19-faf887cbc0e1", "record_id": "flaws_cloudtrail:0000106:c0db5677-6ce0-4f42-8c19-faf887cbc0e1", "row_index": 106, "timestamp": "2019-08-10T23:28:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0db5677-6ce0-4f42-8c19-faf887cbc0e1", "eventTime": "2019-08-10T23:28:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5945c1a7-2fd3-47ec-8482-642acaf83c8d", "record_id": "flaws_cloudtrail:0000107:5945c1a7-2fd3-47ec-8482-642acaf83c8d", "row_index": 107, "timestamp": "2019-08-10T23:29:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5945c1a7-2fd3-47ec-8482-642acaf83c8d", "eventTime": "2019-08-10T23:29:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5945c1a7-2fd3-47ec-8482-642acaf83c8d", "record_id": "flaws_cloudtrail:0000108:5945c1a7-2fd3-47ec-8482-642acaf83c8d", "row_index": 108, "timestamp": "2019-08-10T23:29:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5945c1a7-2fd3-47ec-8482-642acaf83c8d", "eventTime": "2019-08-10T23:29:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f46bf366-781f-4ab2-bbf8-795398e5293a1", "record_id": "flaws_cloudtrail:0000109:f46bf366-781f-4ab2-bbf8-795398e5293a1", "row_index": 109, "timestamp": "2019-08-10T23:29:28Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1219, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f46bf366-781f-4ab2-bbf8-795398e5293a1", "eventTime": "2019-08-10T23:29:28Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f46bf366-781f-4ab2-bbf8-795398e5293a1", "record_id": "flaws_cloudtrail:0000110:f46bf366-781f-4ab2-bbf8-795398e5293a1", "row_index": 110, "timestamp": "2019-08-10T23:29:28Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1219, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f46bf366-781f-4ab2-bbf8-795398e5293a1", "eventTime": "2019-08-10T23:29:28Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6130c4c3-b587-4218-a29d-42084c32777b", "record_id": "flaws_cloudtrail:0000111:6130c4c3-b587-4218-a29d-42084c32777b", "row_index": 111, "timestamp": "2019-08-10T23:30:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1218, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6130c4c3-b587-4218-a29d-42084c32777b", "eventTime": "2019-08-10T23:30:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6130c4c3-b587-4218-a29d-42084c32777b", "record_id": "flaws_cloudtrail:0000112:6130c4c3-b587-4218-a29d-42084c32777b", "row_index": 112, "timestamp": "2019-08-10T23:30:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAIM96V9TV8G4LF45F", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1218, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6130c4c3-b587-4218-a29d-42084c32777b", "eventTime": "2019-08-10T23:30:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAIM96V9TV8G4LF45F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:55:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fee797a-9b4a-465c-a0df-db35e71e158c", "record_id": "flaws_cloudtrail:0000113:2fee797a-9b4a-465c-a0df-db35e71e158c", "row_index": 113, "timestamp": "2019-08-10T23:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fee797a-9b4a-465c-a0df-db35e71e158c", "eventTime": "2019-08-10T23:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANKV06EMRBJ7XT8CH", "expiration": "Aug 11, 2019 5:39:37 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fee797a-9b4a-465c-a0df-db35e71e158c", "record_id": "flaws_cloudtrail:0000114:2fee797a-9b4a-465c-a0df-db35e71e158c", "row_index": 114, "timestamp": "2019-08-10T23:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fee797a-9b4a-465c-a0df-db35e71e158c", "eventTime": "2019-08-10T23:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANKV06EMRBJ7XT8CH", "expiration": "Aug 11, 2019 5:39:37 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85575a46-04fe-4680-be9f-80539768d3ac", "record_id": "flaws_cloudtrail:0000115:85575a46-04fe-4680-be9f-80539768d3ac", "row_index": 115, "timestamp": "2019-08-10T23:34:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA1EUYUICLU34J279V", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85575a46-04fe-4680-be9f-80539768d3ac", "eventTime": "2019-08-10T23:34:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA1EUYUICLU34J279V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85575a46-04fe-4680-be9f-80539768d3ac", "record_id": "flaws_cloudtrail:0000116:85575a46-04fe-4680-be9f-80539768d3ac", "row_index": 116, "timestamp": "2019-08-10T23:34:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA1EUYUICLU34J279V", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85575a46-04fe-4680-be9f-80539768d3ac", "eventTime": "2019-08-10T23:34:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA1EUYUICLU34J279V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee5e29f7-d67a-4386-9f85-d5263e08cf0e", "record_id": "flaws_cloudtrail:0000117:ee5e29f7-d67a-4386-9f85-d5263e08cf0e", "row_index": 117, "timestamp": "2019-08-10T23:35:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA1EUYUICLU34J279V", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee5e29f7-d67a-4386-9f85-d5263e08cf0e", "eventTime": "2019-08-10T23:35:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA1EUYUICLU34J279V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee5e29f7-d67a-4386-9f85-d5263e08cf0e", "record_id": "flaws_cloudtrail:0000118:ee5e29f7-d67a-4386-9f85-d5263e08cf0e", "row_index": 118, "timestamp": "2019-08-10T23:35:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA1EUYUICLU34J279V", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee5e29f7-d67a-4386-9f85-d5263e08cf0e", "eventTime": "2019-08-10T23:35:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA1EUYUICLU34J279V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T22:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a09f94-b19f-4845-96b3-be30a79fce48", "record_id": "flaws_cloudtrail:0000119:09a09f94-b19f-4845-96b3-be30a79fce48", "row_index": 119, "timestamp": "2019-08-10T23:45:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a09f94-b19f-4845-96b3-be30a79fce48", "eventTime": "2019-08-10T23:45:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a09f94-b19f-4845-96b3-be30a79fce48", "record_id": "flaws_cloudtrail:0000120:09a09f94-b19f-4845-96b3-be30a79fce48", "row_index": 120, "timestamp": "2019-08-10T23:45:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a09f94-b19f-4845-96b3-be30a79fce48", "eventTime": "2019-08-10T23:45:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b69c9f3-41a3-442f-b83e-b3b759dacc00", "record_id": "flaws_cloudtrail:0000121:7b69c9f3-41a3-442f-b83e-b3b759dacc00", "row_index": 121, "timestamp": "2019-08-10T23:45:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1167, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b69c9f3-41a3-442f-b83e-b3b759dacc00", "eventTime": "2019-08-10T23:45:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b69c9f3-41a3-442f-b83e-b3b759dacc00", "record_id": "flaws_cloudtrail:0000122:7b69c9f3-41a3-442f-b83e-b3b759dacc00", "row_index": 122, "timestamp": "2019-08-10T23:45:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1167, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b69c9f3-41a3-442f-b83e-b3b759dacc00", "eventTime": "2019-08-10T23:45:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68fe7044-9453-47d6-b099-545bdc353b27", "record_id": "flaws_cloudtrail:0000123:68fe7044-9453-47d6-b099-545bdc353b27", "row_index": 123, "timestamp": "2019-08-11T00:00:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68fe7044-9453-47d6-b099-545bdc353b27", "eventTime": "2019-08-11T00:00:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68fe7044-9453-47d6-b099-545bdc353b27", "record_id": "flaws_cloudtrail:0000124:68fe7044-9453-47d6-b099-545bdc353b27", "row_index": 124, "timestamp": "2019-08-11T00:00:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68fe7044-9453-47d6-b099-545bdc353b27", "eventTime": "2019-08-11T00:00:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279e3c66-dbfc-49cf-9457-7a7ee243521", "record_id": "flaws_cloudtrail:0000125:279e3c66-dbfc-49cf-9457-7a7ee243521", "row_index": 125, "timestamp": "2019-08-11T00:00:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279e3c66-dbfc-49cf-9457-7a7ee243521", "eventTime": "2019-08-11T00:00:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279e3c66-dbfc-49cf-9457-7a7ee243521", "record_id": "flaws_cloudtrail:0000126:279e3c66-dbfc-49cf-9457-7a7ee243521", "row_index": 126, "timestamp": "2019-08-11T00:00:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279e3c66-dbfc-49cf-9457-7a7ee243521", "eventTime": "2019-08-11T00:00:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f9eb97-0055-44b4-91d5-f7b2484ce837", "record_id": "flaws_cloudtrail:0000127:a7f9eb97-0055-44b4-91d5-f7b2484ce837", "row_index": 127, "timestamp": "2019-08-11T00:00:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f9eb97-0055-44b4-91d5-f7b2484ce837", "eventTime": "2019-08-11T00:00:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f9eb97-0055-44b4-91d5-f7b2484ce837", "record_id": "flaws_cloudtrail:0000128:a7f9eb97-0055-44b4-91d5-f7b2484ce837", "row_index": 128, "timestamp": "2019-08-11T00:00:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIANKV06EMRBJ7XT8CH", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f9eb97-0055-44b4-91d5-f7b2484ce837", "eventTime": "2019-08-11T00:00:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIANKV06EMRBJ7XT8CH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-10T23:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0dc6a0f-1d48-42fe-8ba1-1f5c30d007ec", "record_id": "flaws_cloudtrail:0000129:f0dc6a0f-1d48-42fe-8ba1-1f5c30d007ec", "row_index": 129, "timestamp": "2019-08-11T00:25:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0dc6a0f-1d48-42fe-8ba1-1f5c30d007ec", "eventTime": "2019-08-11T00:25:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIATE34VNFA821FYOOF", "expiration": "Aug 11, 2019 1:25:46 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0dc6a0f-1d48-42fe-8ba1-1f5c30d007ec", "record_id": "flaws_cloudtrail:0000130:f0dc6a0f-1d48-42fe-8ba1-1f5c30d007ec", "row_index": 130, "timestamp": "2019-08-11T00:25:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0dc6a0f-1d48-42fe-8ba1-1f5c30d007ec", "eventTime": "2019-08-11T00:25:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIATE34VNFA821FYOOF", "expiration": "Aug 11, 2019 1:25:46 AM", "sessionToken": "AgoJb3JpZ2luX2VjECkaCXVzLXdlc3QtMiJGMEQCICJSZ+IGVrTr8Sr3fDbOTKx0h4CgRz7KgOJ9bOLH5+1ZAiAC4pXQVD2vpCBK2i8FsFEiPI3HankdSpztBDw2H6r9QCrxAgiy//////////8BEAAaDDk3NTQyNjI2MjAyOSIMMRi1xGUaodIakr3tKsUCKPtsH8khFJoqlCBXT1uxR8lwvgiITCJRl/zmFahAgMCjRhDhz/xnkQ/NDNK2LMDJIoXnCLi8OZFNyiOuXtUC9oyqVV0tms9lCkao1XNW2R+JGwadtJ8CNFP8TnuJ6xFngGmHBFL91T0GL29hkORkngAK8dAl4JeA1I+Y6kaoWKIKUVAF2McDUof7/jaQ53Zl97GJyxunVFOt30FPiGBcyVYhvb6ZtVGfyQCVbK5pBE8k9G/fPIErPeecYiqXtAnmqst3meLDqnT2njbB2B0vxn/pmBCIlUJzMLWnqdzvOttZlMCZuFLKmfcCgq7dwB6kYBNa6gi6sa1jWXGinhCspisGCIR7/Pw1PqA9dYV1I3XDVA3vPB+830jdvz2Sz+SEK/qJuVyzhjTfN3gmll9XJKLL68XrrwRGyKBIqYQfhATsAOKrOTCKwb3qBTq1AQboCpcfK6OfMRRKqvRZmslJHUt41kzu27yJID2r1DsMg2tFuRrvMKVjHC4cXcYQI8qFyqKyZxmxpY+WgRo4bVLQ94fEk9o6Mv4DCkTDYiWusiwK77FU5BstJcMBqL6dOW3cCp6Lb+OOIAjfh2/uwF8Row3rvy12XqpCTFkRKHP7RMKsXnPtznaEeYsTY2KvgDHcEG8DV/zUz3McVqftzbR+hXrTIPWgFR1PJC/FSqqxcVzfBZM="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72d2464f-cc53-42fa-9912-44e84b7a1de5", "record_id": "flaws_cloudtrail:0000131:72d2464f-cc53-42fa-9912-44e84b7a1de5", "row_index": 131, "timestamp": "2019-08-11T00:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72d2464f-cc53-42fa-9912-44e84b7a1de5", "eventTime": "2019-08-11T00:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "expiration": "Aug 11, 2019 6:53:56 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72d2464f-cc53-42fa-9912-44e84b7a1de5", "record_id": "flaws_cloudtrail:0000132:72d2464f-cc53-42fa-9912-44e84b7a1de5", "row_index": 132, "timestamp": "2019-08-11T00:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72d2464f-cc53-42fa-9912-44e84b7a1de5", "eventTime": "2019-08-11T00:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "expiration": "Aug 11, 2019 6:53:56 AM", "sessionToken": "AgoJb3JpZ2luX2VjECkaCXVzLXdlc3QtMiJIMEYCIQDR9B0sm1h0BTkAQ3wLOKgPPciFNlUHtwKRRAjKie/g2QIhAJsSolM6lwW4MtBqChozg3ZkAtVdVqDJlHcYUmYCRGCfKuMDCLL//////////wEQABoMOTc1NDI2MjYyMDI5IgyvVcYn5m7xNEX+XV8qtwOSvAuwLMdkTEi3t/bbbPt6ZQHHaPbiUtrfXJqqB3FKYJ+F2i3I265rTPGLcGuTb9V1swpvRb73bMuLVRYZVsHwucGpk5XLLQr6B4Tb/X8L6AUMOx3exUcGlA5xJNSkkbFE41mEEdW3k3woN0zVceid/GPqL1mK14hN90vbIHqSfpbkyh2OATK0s/LrC5+PQ3sAJYVf8Yqnc6SYcEGuQvclVsergzl8EUQS4eKQOCrOfpsuUunVmNO3NjLTCrIazvplzkxzz0JNk+VMyd/RqqPQsstn3FcRErLFT2vrXZCGNk1921H7sTpejD3Y5sVDFffPR3p2pLLqj/7M/c0gqS5LoFGhMiHCgZgnjfsPnJ+gFxyMBbomtZucrSugPeJJMsbotms5Ljv8Pkzpct6eQWeUvs8dgvo2DqAXc2KRuyX5/E+WcOIAJllwmQQ2PQ50psOIjEo5NfU3Kse/IuSrOomitrNqiJX7YPxFpLqEA+nmDpTvZR7tX9midSoB2OwwexqgTj+x1sMk/EGtRmiNLuv0iECB4I7dNzaOVta9VziR/rK7SZ7NEBwv5HSXpkQkuvyHiibUbXZhMPzDveoFOrMBebwG5pFE4Zci152W6bY0hj2lKVQVTa2JVY1A3xLRXqIEvNXkJ2T+evSmQQ8kYrHqLO5pCHbg3bxmt5CyIOpaYNci9E0ZRraB5Pa2aa/qPQKLvwZ7Yccc7JigxyaL0ElqLtybvkTnxe4m2Ybnw4/MqJ/3n9RHfl+I63Zwwb1QqXsam1YRKivO/yAQ+9YmkqHuvRTyd8dAQSfHJ2/sPnZwPoC8QPN6I1RNOOZRNLVaTfXj4k4="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "388fef46-ca17-4579-848b-a4e598b421a1", "record_id": "flaws_cloudtrail:0000133:388fef46-ca17-4579-848b-a4e598b421a1", "row_index": 133, "timestamp": "2019-08-11T00:36:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "388fef46-ca17-4579-848b-a4e598b421a1", "eventTime": "2019-08-11T00:36:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "388fef46-ca17-4579-848b-a4e598b421a1", "record_id": "flaws_cloudtrail:0000134:388fef46-ca17-4579-848b-a4e598b421a1", "row_index": 134, "timestamp": "2019-08-11T00:36:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "388fef46-ca17-4579-848b-a4e598b421a1", "eventTime": "2019-08-11T00:36:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4e8c62c-23ab-4c59-a14d-39a232fabff2", "record_id": "flaws_cloudtrail:0000135:a4e8c62c-23ab-4c59-a14d-39a232fabff2", "row_index": 135, "timestamp": "2019-08-11T00:38:31Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4e8c62c-23ab-4c59-a14d-39a232fabff2", "eventTime": "2019-08-11T00:38:31Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4e8c62c-23ab-4c59-a14d-39a232fabff2", "record_id": "flaws_cloudtrail:0000136:a4e8c62c-23ab-4c59-a14d-39a232fabff2", "row_index": 136, "timestamp": "2019-08-11T00:38:31Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4e8c62c-23ab-4c59-a14d-39a232fabff2", "eventTime": "2019-08-11T00:38:31Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbbee121-3208-4a15-8155-9a9bb03f898f", "record_id": "flaws_cloudtrail:0000137:bbbee121-3208-4a15-8155-9a9bb03f898f", "row_index": 137, "timestamp": "2019-08-11T00:39:44Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbbee121-3208-4a15-8155-9a9bb03f898f", "eventTime": "2019-08-11T00:39:44Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbbee121-3208-4a15-8155-9a9bb03f898f", "record_id": "flaws_cloudtrail:0000138:bbbee121-3208-4a15-8155-9a9bb03f898f", "row_index": 138, "timestamp": "2019-08-11T00:39:44Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbbee121-3208-4a15-8155-9a9bb03f898f", "eventTime": "2019-08-11T00:39:44Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.InvalidZone.NotFound", "errorMessage": "The zone 'us-west-2' does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ab8035f-fb06-4652-9450-742b9aab7819", "record_id": "flaws_cloudtrail:0000139:3ab8035f-fb06-4652-9450-742b9aab7819", "row_index": 139, "timestamp": "2019-08-11T00:39:49Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ab8035f-fb06-4652-9450-742b9aab7819", "eventTime": "2019-08-11T00:39:49Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vtCt-jTXbNt-U4TvmM_U7q7kzZOIeUTBDCMTfJAhwSGESdsuaYcPUqKG8C75juX106urq4ULUlTRSSkd4KHko3nbKYSqIOAqed3BxKk0fBLV34_m-S1fbuz7x8CAdnPdJm8gCbK4S1B6BIDy2nfslUCYAUb_sdIBkOgX8FKxV8glkyt1l0EddnlIvbHdOxXjkTDRof0a28dNmx-7_oR0mFtWbjldCpxYMXPB7UjgEonk8xsmOq2iVf8T35hZP6JwgIyC-FurPEshwjmKH2bHns3m-8yOpS395zItnkLcnV4qe97XJnfL1WMRbHNnbRSCWVvqAp35pSukw-U7QM2J7IRXDT56hLjfBM-YZFVXhxMFLmPc1jb59ny2jE1QM07LDI8Z7VUPG4pMrgw1BprHJTcvVdFBJEo9MD4EOgQtyDtyVUf4NMRYRFoIK6kWWaKwnqHVLXhdaOdDT_ouFdDHxc-hdc2uN2Ibzz6rjM2Am0U-6aj_yQ6AFaeBgaVkstu209ilaYrXBBW-OLGYAyjMI6TGUMQ5qotXB8r5rjNAbkFvvj5Uu7ZnxeXn7QPr1xmuw6V-4gOTLiJlqI23x614qoLi55yh8XidqAMz5WfoJdgz43PHMoBUAxLntD71vQ-YvfcvSg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ab8035f-fb06-4652-9450-742b9aab7819", "record_id": "flaws_cloudtrail:0000140:3ab8035f-fb06-4652-9450-742b9aab7819", "row_index": 140, "timestamp": "2019-08-11T00:39:49Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ab8035f-fb06-4652-9450-742b9aab7819", "eventTime": "2019-08-11T00:39:49Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vtCt-jTXbNt-U4TvmM_U7q7kzZOIeUTBDCMTfJAhwSGESdsuaYcPUqKG8C75juX106urq4ULUlTRSSkd4KHko3nbKYSqIOAqed3BxKk0fBLV34_m-S1fbuz7x8CAdnPdJm8gCbK4S1B6BIDy2nfslUCYAUb_sdIBkOgX8FKxV8glkyt1l0EddnlIvbHdOxXjkTDRof0a28dNmx-7_oR0mFtWbjldCpxYMXPB7UjgEonk8xsmOq2iVf8T35hZP6JwgIyC-FurPEshwjmKH2bHns3m-8yOpS395zItnkLcnV4qe97XJnfL1WMRbHNnbRSCWVvqAp35pSukw-U7QM2J7IRXDT56hLjfBM-YZFVXhxMFLmPc1jb59ny2jE1QM07LDI8Z7VUPG4pMrgw1BprHJTcvVdFBJEo9MD4EOgQtyDtyVUf4NMRYRFoIK6kWWaKwnqHVLXhdaOdDT_ouFdDHxc-hdc2uN2Ibzz6rjM2Am0U-6aj_yQ6AFaeBgaVkstu209ilaYrXBBW-OLGYAyjMI6TGUMQ5qotXB8r5rjNAbkFvvj5Uu7ZnxeXn7QPr1xmuw6V-4gOTLiJlqI23x614qoLi55yh8XidqAMz5WfoJdgz43PHMoBUAxLntD71vQ-YvfcvSg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474fa27c-102d-4343-8c3b-b577b499f63d", "record_id": "flaws_cloudtrail:0000141:474fa27c-102d-4343-8c3b-b577b499f63d", "row_index": 141, "timestamp": "2019-08-11T00:44:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474fa27c-102d-4343-8c3b-b577b499f63d", "eventTime": "2019-08-11T00:44:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474fa27c-102d-4343-8c3b-b577b499f63d", "record_id": "flaws_cloudtrail:0000142:474fa27c-102d-4343-8c3b-b577b499f63d", "row_index": 142, "timestamp": "2019-08-11T00:44:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474fa27c-102d-4343-8c3b-b577b499f63d", "eventTime": "2019-08-11T00:44:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5110bd71-3eb7-466e-b04d-29d1a86490c6", "record_id": "flaws_cloudtrail:0000143:5110bd71-3eb7-466e-b04d-29d1a86490c6", "row_index": 143, "timestamp": "2019-08-11T00:48:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5110bd71-3eb7-466e-b04d-29d1a86490c6", "eventTime": "2019-08-11T00:48:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5110bd71-3eb7-466e-b04d-29d1a86490c6", "record_id": "flaws_cloudtrail:0000144:5110bd71-3eb7-466e-b04d-29d1a86490c6", "row_index": 144, "timestamp": "2019-08-11T00:48:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "74.243.202.252", "user_agent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5110bd71-3eb7-466e-b04d-29d1a86490c6", "eventTime": "2019-08-11T00:48:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "74.243.202.252", "userAgent": "[aws-cli/1.16.208 Python/3.7.4 Linux/5.2.5-arch1-1-ARCH botocore/1.12.198]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e6b2287-f023-4308-ad56-6cf7333beacb", "record_id": "flaws_cloudtrail:0000145:6e6b2287-f023-4308-ad56-6cf7333beacb", "row_index": 145, "timestamp": "2019-08-11T00:58:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e6b2287-f023-4308-ad56-6cf7333beacb", "eventTime": "2019-08-11T00:58:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e6b2287-f023-4308-ad56-6cf7333beacb", "record_id": "flaws_cloudtrail:0000146:6e6b2287-f023-4308-ad56-6cf7333beacb", "row_index": 146, "timestamp": "2019-08-11T00:58:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e6b2287-f023-4308-ad56-6cf7333beacb", "eventTime": "2019-08-11T00:58:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63dd4c9c-aeb5-448d-8f9a-1208d87749c5", "record_id": "flaws_cloudtrail:0000147:63dd4c9c-aeb5-448d-8f9a-1208d87749c5", "row_index": 147, "timestamp": "2019-08-11T01:01:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1166, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63dd4c9c-aeb5-448d-8f9a-1208d87749c5", "eventTime": "2019-08-11T01:01:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63dd4c9c-aeb5-448d-8f9a-1208d87749c5", "record_id": "flaws_cloudtrail:0000148:63dd4c9c-aeb5-448d-8f9a-1208d87749c5", "row_index": 148, "timestamp": "2019-08-11T01:01:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1166, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63dd4c9c-aeb5-448d-8f9a-1208d87749c5", "eventTime": "2019-08-11T01:01:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da233bfa-2504-410d-9900-0b901203b59", "record_id": "flaws_cloudtrail:0000149:da233bfa-2504-410d-9900-0b901203b59", "row_index": 149, "timestamp": "2019-08-11T01:08:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da233bfa-2504-410d-9900-0b901203b59", "eventTime": "2019-08-11T01:08:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da233bfa-2504-410d-9900-0b901203b59", "record_id": "flaws_cloudtrail:0000150:da233bfa-2504-410d-9900-0b901203b59", "row_index": 150, "timestamp": "2019-08-11T01:08:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da233bfa-2504-410d-9900-0b901203b59", "eventTime": "2019-08-11T01:08:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aafc450-a3fb-461e-bdca-e9e17580d09b", "record_id": "flaws_cloudtrail:0000151:5aafc450-a3fb-461e-bdca-e9e17580d09b", "row_index": 151, "timestamp": "2019-08-11T01:26:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA2LC474SG1FF09T4U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.146.205.156", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 531, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aafc450-a3fb-461e-bdca-e9e17580d09b", "eventTime": "2019-08-11T01:26:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.146.205.156", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA2LC474SG1FF09T4U", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a27e45a7-4ebc-482d-a581-86a32de4b33d", "record_id": "flaws_cloudtrail:0000152:a27e45a7-4ebc-482d-a581-86a32de4b33d", "row_index": 152, "timestamp": "2019-08-11T01:26:50Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA2LC474SG1FF09T4U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.146.205.156", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 560, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a27e45a7-4ebc-482d-a581-86a32de4b33d", "eventTime": "2019-08-11T01:26:50Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.146.205.156", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA2LC474SG1FF09T4U", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41ca25df-148b-42af-ba2f-b7cdc7b6dfb3", "record_id": "flaws_cloudtrail:0000153:41ca25df-148b-42af-ba2f-b7cdc7b6dfb3", "row_index": 153, "timestamp": "2019-08-11T01:29:18Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA2LC474SG1FF09T4U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.146.205.156", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 570, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41ca25df-148b-42af-ba2f-b7cdc7b6dfb3", "eventTime": "2019-08-11T01:29:18Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.146.205.156", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA2LC474SG1FF09T4U", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d85d93-b73c-4118-b5a0-a2743ceced7c", "record_id": "flaws_cloudtrail:0000154:37d85d93-b73c-4118-b5a0-a2743ceced7c", "row_index": 154, "timestamp": "2019-08-11T01:30:45Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA2LC474SG1FF09T4U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.146.205.156", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-161"], "raw_record_size_bytes": 644, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d85d93-b73c-4118-b5a0-a2743ceced7c", "eventTime": "2019-08-11T01:30:45Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.146.205.156", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA2LC474SG1FF09T4U", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-161"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-161"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c959fb8-4eab-4414-a037-7bcea1cdb456", "record_id": "flaws_cloudtrail:0000155:2c959fb8-4eab-4414-a037-7bcea1cdb456", "row_index": 155, "timestamp": "2019-08-11T01:31:11Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA2LC474SG1FF09T4U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.146.205.156", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-161"], "raw_record_size_bytes": 649, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c959fb8-4eab-4414-a037-7bcea1cdb456", "eventTime": "2019-08-11T01:31:11Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.146.205.156", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA2LC474SG1FF09T4U", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-161"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-161"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77508592-ff20-441b-a79a-9fe048631f7e", "record_id": "flaws_cloudtrail:0000156:77508592-ff20-441b-a79a-9fe048631f7e", "row_index": 156, "timestamp": "2019-08-11T01:31:43Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA2LC474SG1FF09T4U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "180.146.205.156", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-161", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77508592-ff20-441b-a79a-9fe048631f7e", "eventTime": "2019-08-11T01:31:43Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "180.146.205.156", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA2LC474SG1FF09T4U", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-161", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-161"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a3f978b-40c7-4fad-8947-025766ba693e", "record_id": "flaws_cloudtrail:0000157:2a3f978b-40c7-4fad-8947-025766ba693e", "row_index": 157, "timestamp": "2019-08-11T01:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a3f978b-40c7-4fad-8947-025766ba693e", "eventTime": "2019-08-11T01:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGQZ42CA2Q6NGGH2R", "expiration": "Aug 11, 2019 7:55:04 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a3f978b-40c7-4fad-8947-025766ba693e", "record_id": "flaws_cloudtrail:0000158:2a3f978b-40c7-4fad-8947-025766ba693e", "row_index": 158, "timestamp": "2019-08-11T01:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a3f978b-40c7-4fad-8947-025766ba693e", "eventTime": "2019-08-11T01:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGQZ42CA2Q6NGGH2R", "expiration": "Aug 11, 2019 7:55:04 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c49730-8391-4e54-9321-89900b078d", "record_id": "flaws_cloudtrail:0000159:c49730-8391-4e54-9321-89900b078d", "row_index": 159, "timestamp": "2019-08-11T02:15:18Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAXY3PEMUOUJ2JOW2W", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "192.226.55.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c49730-8391-4e54-9321-89900b078d", "eventTime": "2019-08-11T02:15:18Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "192.226.55.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXY3PEMUOUJ2JOW2W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T02:15:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/11/[$LATEST]b9ee4497df525f9b54e5693f1488954c", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e9a711-418d-430d-a5bb-1c75164c2a25", "record_id": "flaws_cloudtrail:0000160:e1e9a711-418d-430d-a5bb-1c75164c2a25", "row_index": 160, "timestamp": "2019-08-11T02:15:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e9a711-418d-430d-a5bb-1c75164c2a25", "eventTime": "2019-08-11T02:15:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXY3PEMUOUJ2JOW2W", "expiration": "Aug 11, 2019 2:15:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c3c3057-d5ee-48ae-a164-a30f605ad5aa", "record_id": "flaws_cloudtrail:0000161:2c3c3057-d5ee-48ae-a164-a30f605ad5aa", "row_index": 161, "timestamp": "2019-08-11T02:15:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c3c3057-d5ee-48ae-a164-a30f605ad5aa", "eventTime": "2019-08-11T02:15:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKLBRXJ2O1TFX3M8Z", "expiration": "Aug 11, 2019 2:15:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c49730-8391-4e54-9321-89900b078d", "record_id": "flaws_cloudtrail:0000162:c49730-8391-4e54-9321-89900b078d", "row_index": 162, "timestamp": "2019-08-11T02:15:18Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAXY3PEMUOUJ2JOW2W", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "192.226.55.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c49730-8391-4e54-9321-89900b078d", "eventTime": "2019-08-11T02:15:18Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "192.226.55.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXY3PEMUOUJ2JOW2W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T02:15:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/11/[$LATEST]b9ee4497df525f9b54e5693f1488954c", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e9a711-418d-430d-a5bb-1c75164c2a25", "record_id": "flaws_cloudtrail:0000163:e1e9a711-418d-430d-a5bb-1c75164c2a25", "row_index": 163, "timestamp": "2019-08-11T02:15:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e9a711-418d-430d-a5bb-1c75164c2a25", "eventTime": "2019-08-11T02:15:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXY3PEMUOUJ2JOW2W", "expiration": "Aug 11, 2019 2:15:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c3c3057-d5ee-48ae-a164-a30f605ad5aa", "record_id": "flaws_cloudtrail:0000164:2c3c3057-d5ee-48ae-a164-a30f605ad5aa", "row_index": 164, "timestamp": "2019-08-11T02:15:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c3c3057-d5ee-48ae-a164-a30f605ad5aa", "eventTime": "2019-08-11T02:15:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKLBRXJ2O1TFX3M8Z", "expiration": "Aug 11, 2019 2:15:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d32862-ec91-4e3c-a5e8-fc35d9b27a40", "record_id": "flaws_cloudtrail:0000165:3d32862-ec91-4e3c-a5e8-fc35d9b27a40", "row_index": 165, "timestamp": "2019-08-11T02:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d32862-ec91-4e3c-a5e8-fc35d9b27a40", "eventTime": "2019-08-11T02:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3K8G2570SSBM0AQ8", "expiration": "Aug 11, 2019 8:58:30 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d32862-ec91-4e3c-a5e8-fc35d9b27a40", "record_id": "flaws_cloudtrail:0000166:3d32862-ec91-4e3c-a5e8-fc35d9b27a40", "row_index": 166, "timestamp": "2019-08-11T02:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d32862-ec91-4e3c-a5e8-fc35d9b27a40", "eventTime": "2019-08-11T02:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3K8G2570SSBM0AQ8", "expiration": "Aug 11, 2019 8:58:30 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fabaee8-3af1-4336-af95-89f00ddc8faf", "record_id": "flaws_cloudtrail:0000167:3fabaee8-3af1-4336-af95-89f00ddc8faf", "row_index": 167, "timestamp": "2019-08-11T03:01:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fabaee8-3af1-4336-af95-89f00ddc8faf", "eventTime": "2019-08-11T03:01:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fabaee8-3af1-4336-af95-89f00ddc8faf", "record_id": "flaws_cloudtrail:0000168:3fabaee8-3af1-4336-af95-89f00ddc8faf", "row_index": 168, "timestamp": "2019-08-11T03:01:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fabaee8-3af1-4336-af95-89f00ddc8faf", "eventTime": "2019-08-11T03:01:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a36ce723-4505-45ee-a150-76c2806c8b16", "record_id": "flaws_cloudtrail:0000169:a36ce723-4505-45ee-a150-76c2806c8b16", "row_index": 169, "timestamp": "2019-08-11T03:06:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a36ce723-4505-45ee-a150-76c2806c8b16", "eventTime": "2019-08-11T03:06:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a36ce723-4505-45ee-a150-76c2806c8b16", "record_id": "flaws_cloudtrail:0000170:a36ce723-4505-45ee-a150-76c2806c8b16", "row_index": 170, "timestamp": "2019-08-11T03:06:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a36ce723-4505-45ee-a150-76c2806c8b16", "eventTime": "2019-08-11T03:06:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d45eba-0831-4bf7-9a99-48a505062b2c8", "record_id": "flaws_cloudtrail:0000171:97d45eba-0831-4bf7-9a99-48a505062b2c8", "row_index": 171, "timestamp": "2019-08-11T03:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d45eba-0831-4bf7-9a99-48a505062b2c8", "eventTime": "2019-08-11T03:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMW49MEPFA813OAQL", "expiration": "Aug 11, 2019 10:02:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d45eba-0831-4bf7-9a99-48a505062b2c8", "record_id": "flaws_cloudtrail:0000172:97d45eba-0831-4bf7-9a99-48a505062b2c8", "row_index": 172, "timestamp": "2019-08-11T03:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d45eba-0831-4bf7-9a99-48a505062b2c8", "eventTime": "2019-08-11T03:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMW49MEPFA813OAQL", "expiration": "Aug 11, 2019 10:02:43 AM", "sessionToken": "AgoJb3JpZ2luX2VjECwaCXVzLXdlc3QtMiJHMEUCIQD8QTlP8C4c4eUbAf/cHENjMCW+4De15pqDgUP9H5ciGQIgA9mCdxMkif+6rW7mMVH79StnxxBkUcxehAw7qS1vv9wq4wMItf//////////ARAAGgw5NzU0MjYyNjIwMjkiDNLbfWgVFpAiCJGdSSq3A7JHoAQinNwFrT1I48r6tf8rsz6zkdB/KZa9BDqEtxWMTiS0gylZHp6mSvfNZGCFFqHubXk1UlGp4Ub7yHyNtKtweDGkQqaqZzhIGqgDm7YL3j8SWfGhvpGr5xUakyUvDhy0rP3YbI0U+Y/4GXDk7WbOzz0WBKb93YdnqvhbPPe+38HXcBzOxJ1If6mIyOWjCbj5+QVKM8rG9ZE+B+3wH3nMgM2cE/hZyHio2oyrvXjX3/RHyqUoXobK9s6EYLQGzppzvyIf9n5OExeMiUSVaMYwTkqvd/SkiUyT7petuO77TLw/VxXdZYngMvNJBeCKGLHHe5gGStFDirqltiozmQUhn0jol9+A6SMMNihcIc3nJGUw9rpWwNLm1g8i/cTvcditJ/4H5dgOdGK7BGdFmAhwxak8CVqZ4ZCMQ4Q2iVupGT+HWsN8Wd2fLhTfWsRqFF6J3aQaBMBGNvtWllsS8AlLzr7Nqm+Bb6HnXqhmFPjGdK2Gis/5f0ko2kVXQlXKQEe0ThKqh3XC1t4Hw6bf04IphBaFTvfMF5N8J+brO8uCbI5R8UGFy7E7PSi9rd2W40gs070xOlcwrJi+6gU6tAGgRkMr0L2dpN9T6rqhPlAhPKToS1WRHUmRICXHRyEof8TcnK6tBBHZrTwirb39za4GZwOxV7gZWQdqWi4r7dk2rpntMLEWSXTlRTBaFuDpCQ/E0KfsgQ8TDfPeYJvwLxQPcunBAKpifZ+LgZVERkafajX4WQhR03FB66KwFV1JsxSTacacFcA0LnyLaEodUUYdB0DuoKU7VfHEHy4CxtJYzzhb4xQ1rYLXNyCG3OovUBJK6oE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24c5ef13-10be-4198-841d-2de36580f6d0", "record_id": "flaws_cloudtrail:0000173:24c5ef13-10be-4198-841d-2de36580f6d0", "row_index": 173, "timestamp": "2019-08-11T03:41:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24c5ef13-10be-4198-841d-2de36580f6d0", "eventTime": "2019-08-11T03:41:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24c5ef13-10be-4198-841d-2de36580f6d0", "record_id": "flaws_cloudtrail:0000174:24c5ef13-10be-4198-841d-2de36580f6d0", "row_index": 174, "timestamp": "2019-08-11T03:41:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24c5ef13-10be-4198-841d-2de36580f6d0", "eventTime": "2019-08-11T03:41:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11ebfa44-3de5-4f2f-9a08-23b5bfc0e84f", "record_id": "flaws_cloudtrail:0000175:11ebfa44-3de5-4f2f-9a08-23b5bfc0e84f", "row_index": 175, "timestamp": "2019-08-11T03:42:18Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11ebfa44-3de5-4f2f-9a08-23b5bfc0e84f", "eventTime": "2019-08-11T03:42:18Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11ebfa44-3de5-4f2f-9a08-23b5bfc0e84f", "record_id": "flaws_cloudtrail:0000176:11ebfa44-3de5-4f2f-9a08-23b5bfc0e84f", "row_index": 176, "timestamp": "2019-08-11T03:42:18Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11ebfa44-3de5-4f2f-9a08-23b5bfc0e84f", "eventTime": "2019-08-11T03:42:18Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a860116-c540-428f-9ce3-f9a8ede65ea1", "record_id": "flaws_cloudtrail:0000177:a860116-c540-428f-9ce3-f9a8ede65ea1", "row_index": 177, "timestamp": "2019-08-11T03:43:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a860116-c540-428f-9ce3-f9a8ede65ea1", "eventTime": "2019-08-11T03:43:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a860116-c540-428f-9ce3-f9a8ede65ea1", "record_id": "flaws_cloudtrail:0000178:a860116-c540-428f-9ce3-f9a8ede65ea1", "row_index": 178, "timestamp": "2019-08-11T03:43:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a860116-c540-428f-9ce3-f9a8ede65ea1", "eventTime": "2019-08-11T03:43:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400cd414-d705-4e3e-8111-90bfa39073e", "record_id": "flaws_cloudtrail:0000179:400cd414-d705-4e3e-8111-90bfa39073e", "row_index": 179, "timestamp": "2019-08-11T03:43:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400cd414-d705-4e3e-8111-90bfa39073e", "eventTime": "2019-08-11T03:43:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkUmRCMDFMRStBdHduczNRYWRkeEQwMVJVOXdrSFFXVGNKb2hCcUZ4UzdraGd4cFBzUjVqTDlCU0YxaTFuRGJOdy9MdjN4dG1FL1JQcXNxZmJzcXJueWZzUUlWMWE3NEd4TzZXeW82RGR6Um1iWWtKRVNCTUMxdFM4R1hnU1UvRExqNWd3SERRRU5QQjZ1ejAxZjA3SmZGVmxzOHFtbjNmNlZ1V21zRGpQd2xTdE9tTTNNa2hyNG4vQ2NzMWlObTRvVVZFTVFucGJORmJsUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400cd414-d705-4e3e-8111-90bfa39073e", "record_id": "flaws_cloudtrail:0000180:400cd414-d705-4e3e-8111-90bfa39073e", "row_index": 180, "timestamp": "2019-08-11T03:43:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400cd414-d705-4e3e-8111-90bfa39073e", "eventTime": "2019-08-11T03:43:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkUmRCMDFMRStBdHduczNRYWRkeEQwMVJVOXdrSFFXVGNKb2hCcUZ4UzdraGd4cFBzUjVqTDlCU0YxaTFuRGJOdy9MdjN4dG1FL1JQcXNxZmJzcXJueWZzUUlWMWE3NEd4TzZXeW82RGR6Um1iWWtKRVNCTUMxdFM4R1hnU1UvRExqNWd3SERRRU5QQjZ1ejAxZjA3SmZGVmxzOHFtbjNmNlZ1V21zRGpQd2xTdE9tTTNNa2hyNG4vQ2NzMWlObTRvVVZFTVFucGJORmJsUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06f1a814-c152-47b8-85ff-3527fdb9c8c3", "record_id": "flaws_cloudtrail:0000181:06f1a814-c152-47b8-85ff-3527fdb9c8c3", "row_index": 181, "timestamp": "2019-08-11T03:43:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06f1a814-c152-47b8-85ff-3527fdb9c8c3", "eventTime": "2019-08-11T03:43:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGTFRzTm1XbFlhQzQyQTY2bkk0aU1ySUUwZEZSWjNsbTgvdnJ6Y05uZVgxZkcyOWhjRUlpVUloOWVpSGZsRTZlcUg0YUd1TmNHZlY4U2cwMEh4TEZhTHRqZ0JNNzBkTUxEbVdrRGtveWs2ZnAvYjJiM01ZVmQ5Q3V1QWZJREFoYlU0a0hPT3NiWGxRa3AzMXU0K2VWclNFaWloTzRDM0FDVjNtenQ3TzFZSWRKaXFndUVjQnloKytQMFJOTWtGWjJGUnB3b0V3QUdYbFY2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06f1a814-c152-47b8-85ff-3527fdb9c8c3", "record_id": "flaws_cloudtrail:0000182:06f1a814-c152-47b8-85ff-3527fdb9c8c3", "row_index": 182, "timestamp": "2019-08-11T03:43:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06f1a814-c152-47b8-85ff-3527fdb9c8c3", "eventTime": "2019-08-11T03:43:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGTFRzTm1XbFlhQzQyQTY2bkk0aU1ySUUwZEZSWjNsbTgvdnJ6Y05uZVgxZkcyOWhjRUlpVUloOWVpSGZsRTZlcUg0YUd1TmNHZlY4U2cwMEh4TEZhTHRqZ0JNNzBkTUxEbVdrRGtveWs2ZnAvYjJiM01ZVmQ5Q3V1QWZJREFoYlU0a0hPT3NiWGxRa3AzMXU0K2VWclNFaWloTzRDM0FDVjNtenQ3TzFZSWRKaXFndUVjQnloKytQMFJOTWtGWjJGUnB3b0V3QUdYbFY2UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed4a70f-9240-4e59-af32-28153fb4b2e7", "record_id": "flaws_cloudtrail:0000183:aed4a70f-9240-4e59-af32-28153fb4b2e7", "row_index": 183, "timestamp": "2019-08-11T03:43:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed4a70f-9240-4e59-af32-28153fb4b2e7", "eventTime": "2019-08-11T03:43:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1L2QyMXJmc1daS2tPM0NIL3ZjRVY1MU1Ya1k3SHRtUUtkdTJ6ZWliYnBxQ0d5aUlHVVAyNHZLMGJ5bUNEcUxyQTArbDJXcHRLSCtwaDliMm5oeXRpSVdRYWkxdFRsU2NCMElXYWRENDM3RXIzaVkyUE9Ycld3S3VBS1krc2dHUDZnWjlnMXc5SXRWUE84c2hITU8zc2NHV05sT29EZEpZbnA4VVlZL3pyYVNjUXZ6c2tPWWFNQmlhZkVhSmJyYVVzSzhlVTV2K25kNDJkdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed4a70f-9240-4e59-af32-28153fb4b2e7", "record_id": "flaws_cloudtrail:0000184:aed4a70f-9240-4e59-af32-28153fb4b2e7", "row_index": 184, "timestamp": "2019-08-11T03:43:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed4a70f-9240-4e59-af32-28153fb4b2e7", "eventTime": "2019-08-11T03:43:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1L2QyMXJmc1daS2tPM0NIL3ZjRVY1MU1Ya1k3SHRtUUtkdTJ6ZWliYnBxQ0d5aUlHVVAyNHZLMGJ5bUNEcUxyQTArbDJXcHRLSCtwaDliMm5oeXRpSVdRYWkxdFRsU2NCMElXYWRENDM3RXIzaVkyUE9Ycld3S3VBS1krc2dHUDZnWjlnMXc5SXRWUE84c2hITU8zc2NHV05sT29EZEpZbnA4VVlZL3pyYVNjUXZ6c2tPWWFNQmlhZkVhSmJyYVVzSzhlVTV2K25kNDJkdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8247ce9-25c0-4a40-8c95-fbb3dd94cf9f", "record_id": "flaws_cloudtrail:0000185:c8247ce9-25c0-4a40-8c95-fbb3dd94cf9f", "row_index": 185, "timestamp": "2019-08-11T03:43:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8247ce9-25c0-4a40-8c95-fbb3dd94cf9f", "eventTime": "2019-08-11T03:43:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4cUNGRFE4TWIwWEViSzlrVndQZ0hoQWFsOFpRWjlTNU5Xd1prZGliOURXQ2xVczgxWWlDeFJLbmRkUm9tMTNwUXk2YzVyNzVrSGc1Uk1uL0RhVVFkL085eWNxNjZzZ0ZLNUZJYi9xUTVtUkhkRko1Q3VWOGE5aElHbW1GT2h6N0FFem5BelpIRXlGUEp5Tzd4MXRZUTdxU2dNQnFsU2l0bXBucmdEZkJjVFpFTjdCbHNWQXRIU0RtTHU3T2kvZkkwL25mK0tnajJqRGNOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8247ce9-25c0-4a40-8c95-fbb3dd94cf9f", "record_id": "flaws_cloudtrail:0000186:c8247ce9-25c0-4a40-8c95-fbb3dd94cf9f", "row_index": 186, "timestamp": "2019-08-11T03:43:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8247ce9-25c0-4a40-8c95-fbb3dd94cf9f", "eventTime": "2019-08-11T03:43:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4cUNGRFE4TWIwWEViSzlrVndQZ0hoQWFsOFpRWjlTNU5Xd1prZGliOURXQ2xVczgxWWlDeFJLbmRkUm9tMTNwUXk2YzVyNzVrSGc1Uk1uL0RhVVFkL085eWNxNjZzZ0ZLNUZJYi9xUTVtUkhkRko1Q3VWOGE5aElHbW1GT2h6N0FFem5BelpIRXlGUEp5Tzd4MXRZUTdxU2dNQnFsU2l0bXBucmdEZkJjVFpFTjdCbHNWQXRIU0RtTHU3T2kvZkkwL25mK0tnajJqRGNOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb751ac7-ef05-4749-8c72-21eaacfd394e", "record_id": "flaws_cloudtrail:0000187:bb751ac7-ef05-4749-8c72-21eaacfd394e", "row_index": 187, "timestamp": "2019-08-11T03:43:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb751ac7-ef05-4749-8c72-21eaacfd394e", "eventTime": "2019-08-11T03:43:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVM1FxSjZVUDVBM3A3b1dBMWd3UXlobVhYRFBqL3dscHJJemVBMFV4a3prUGxzdVk0b0lNY3JSSVYyV3VXVWRYTGRKblpJZDNraHh6Y0ExOEErSVBabjhGTEFuR1kzSXBVUWRSYjI1cUpCd0Y0Y1l6Z3pLaXRhVmw1ZjBEMkJPRnpHZGVQTzBTUFJMVWVFdGtydlVReHpLcDdzanh4c2lBSDl0aEdWVFI3bWg4aGMrVjhjUmhJcTdEY0tReVdhMDRNV3JPcDFNMURGVFVhZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb751ac7-ef05-4749-8c72-21eaacfd394e", "record_id": "flaws_cloudtrail:0000188:bb751ac7-ef05-4749-8c72-21eaacfd394e", "row_index": 188, "timestamp": "2019-08-11T03:43:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb751ac7-ef05-4749-8c72-21eaacfd394e", "eventTime": "2019-08-11T03:43:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVM1FxSjZVUDVBM3A3b1dBMWd3UXlobVhYRFBqL3dscHJJemVBMFV4a3prUGxzdVk0b0lNY3JSSVYyV3VXVWRYTGRKblpJZDNraHh6Y0ExOEErSVBabjhGTEFuR1kzSXBVUWRSYjI1cUpCd0Y0Y1l6Z3pLaXRhVmw1ZjBEMkJPRnpHZGVQTzBTUFJMVWVFdGtydlVReHpLcDdzanh4c2lBSDl0aEdWVFI3bWg4aGMrVjhjUmhJcTdEY0tReVdhMDRNV3JPcDFNMURGVFVhZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898b4577-a9ce-4705-9904-b08d5a933972", "record_id": "flaws_cloudtrail:0000189:898b4577-a9ce-4705-9904-b08d5a933972", "row_index": 189, "timestamp": "2019-08-11T03:43:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898b4577-a9ce-4705-9904-b08d5a933972", "eventTime": "2019-08-11T03:43:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWTjVWTjRsY25RbWtNdGNweUczK2tYWjB4ZnZtM2VTbTA3VE9LaDJpYlZCaHBPOFUwMUl4UlVCc2JvNUV0Zk1ZQUpWOHQvNTJTdEF6R2E5NlU0VC9SSkN2c0JwcU9ZbjFaSlhXcXIvU3hrZDdZcXBENnhIUkd0T2xrNlZybHJUVGR5WGxtbnBpQ3BJZ2VVU1N4OFdJVWFKdmRyTzR3UDlCNkIyUjlPanBWNHJGV01JaVN2aFkzTkJ2QVZNcFZoOU15VEgwRlo4MHluaytJdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898b4577-a9ce-4705-9904-b08d5a933972", "record_id": "flaws_cloudtrail:0000190:898b4577-a9ce-4705-9904-b08d5a933972", "row_index": 190, "timestamp": "2019-08-11T03:43:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898b4577-a9ce-4705-9904-b08d5a933972", "eventTime": "2019-08-11T03:43:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWTjVWTjRsY25RbWtNdGNweUczK2tYWjB4ZnZtM2VTbTA3VE9LaDJpYlZCaHBPOFUwMUl4UlVCc2JvNUV0Zk1ZQUpWOHQvNTJTdEF6R2E5NlU0VC9SSkN2c0JwcU9ZbjFaSlhXcXIvU3hrZDdZcXBENnhIUkd0T2xrNlZybHJUVGR5WGxtbnBpQ3BJZ2VVU1N4OFdJVWFKdmRyTzR3UDlCNkIyUjlPanBWNHJGV01JaVN2aFkzTkJ2QVZNcFZoOU15VEgwRlo4MHluaytJdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53451-8180-41ce-b984-8c331be273fb", "record_id": "flaws_cloudtrail:0000191:53451-8180-41ce-b984-8c331be273fb", "row_index": 191, "timestamp": "2019-08-11T03:43:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53451-8180-41ce-b984-8c331be273fb", "eventTime": "2019-08-11T03:43:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53451-8180-41ce-b984-8c331be273fb", "record_id": "flaws_cloudtrail:0000192:53451-8180-41ce-b984-8c331be273fb", "row_index": 192, "timestamp": "2019-08-11T03:43:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53451-8180-41ce-b984-8c331be273fb", "eventTime": "2019-08-11T03:43:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f29ee19-0896-4372-88a8-3f64c31fa0fe", "record_id": "flaws_cloudtrail:0000193:6f29ee19-0896-4372-88a8-3f64c31fa0fe", "row_index": 193, "timestamp": "2019-08-11T03:44:44Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f29ee19-0896-4372-88a8-3f64c31fa0fe", "eventTime": "2019-08-11T03:44:44Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f29ee19-0896-4372-88a8-3f64c31fa0fe", "record_id": "flaws_cloudtrail:0000194:6f29ee19-0896-4372-88a8-3f64c31fa0fe", "row_index": 194, "timestamp": "2019-08-11T03:44:44Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f29ee19-0896-4372-88a8-3f64c31fa0fe", "eventTime": "2019-08-11T03:44:44Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474da139-72fc-465b-b205-74aacda857142", "record_id": "flaws_cloudtrail:0000195:474da139-72fc-465b-b205-74aacda857142", "row_index": 195, "timestamp": "2019-08-11T03:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474da139-72fc-465b-b205-74aacda857142", "eventTime": "2019-08-11T03:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474da139-72fc-465b-b205-74aacda857142", "record_id": "flaws_cloudtrail:0000196:474da139-72fc-465b-b205-74aacda857142", "row_index": 196, "timestamp": "2019-08-11T03:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474da139-72fc-465b-b205-74aacda857142", "eventTime": "2019-08-11T03:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43ea6778-4874-455f-ad4c-8f6c6777566c", "record_id": "flaws_cloudtrail:0000197:43ea6778-4874-455f-ad4c-8f6c6777566c", "row_index": 197, "timestamp": "2019-08-11T03:46:52Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1511, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43ea6778-4874-455f-ad4c-8f6c6777566c", "eventTime": "2019-08-11T03:46:52Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H5TAqc1yR23bbDQ5JRoTx66CP7oHYMecINZZSJ_MxHrDf8hxsiQnw0A6Aet7CdlXiWk4XujMUIoFUpEpfLK8hrVcgWqUYZBgX2w9M_U9wig7G6vMjCx33b7_KDUeFg14t3xH7HVVZif7Uoh1m3A3Im3A9uDW0pybL4jJeS_73nkncgLiv2iDDfB3HETI4ZFAazKOkWS2tlE7QmFQq0rSuib88kvzih5V97Z4NLboki58dyz6IEoprQK2eVaqgeuAjrsZop24XoiEzBSj9bdIyCifU7hiPQfknRYDMe3YRi5js9dnw8Ag_V_6IEI5FCqoY-TQu_KQmlKqIpdnKGwrMg-v-H2kdRWWsYQ9umCJvqNclEtf7Q_wHeDfHB6P-2i59mNPcoF_caQ1uY_au7i0wGla7BQWEpbm70RY7dlNnUL-DRR5Iz5Nk6umXHgynxeHTWIP3434h__3avm1Sjl2oZFqNuc3xIANbnnojGOx4ZiByj_Qi4nuA7NnLVXdrbLuiMBcJwBkBkmsas2MSQ3QgV8dHmwoPkGeWExDtkPQfkqY-s3BeGhGwPzmEFfSddLRhcYKqnBXBbiTeKO6CE3oxFcSYHzHC0iHbic-dAOxPxXsj0w78_xHZAOL4X8B_gRaJH5BuA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43ea6778-4874-455f-ad4c-8f6c6777566c", "record_id": "flaws_cloudtrail:0000198:43ea6778-4874-455f-ad4c-8f6c6777566c", "row_index": 198, "timestamp": "2019-08-11T03:46:52Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1511, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43ea6778-4874-455f-ad4c-8f6c6777566c", "eventTime": "2019-08-11T03:46:52Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H5TAqc1yR23bbDQ5JRoTx66CP7oHYMecINZZSJ_MxHrDf8hxsiQnw0A6Aet7CdlXiWk4XujMUIoFUpEpfLK8hrVcgWqUYZBgX2w9M_U9wig7G6vMjCx33b7_KDUeFg14t3xH7HVVZif7Uoh1m3A3Im3A9uDW0pybL4jJeS_73nkncgLiv2iDDfB3HETI4ZFAazKOkWS2tlE7QmFQq0rSuib88kvzih5V97Z4NLboki58dyz6IEoprQK2eVaqgeuAjrsZop24XoiEzBSj9bdIyCifU7hiPQfknRYDMe3YRi5js9dnw8Ag_V_6IEI5FCqoY-TQu_KQmlKqIpdnKGwrMg-v-H2kdRWWsYQ9umCJvqNclEtf7Q_wHeDfHB6P-2i59mNPcoF_caQ1uY_au7i0wGla7BQWEpbm70RY7dlNnUL-DRR5Iz5Nk6umXHgynxeHTWIP3434h__3avm1Sjl2oZFqNuc3xIANbnnojGOx4ZiByj_Qi4nuA7NnLVXdrbLuiMBcJwBkBkmsas2MSQ3QgV8dHmwoPkGeWExDtkPQfkqY-s3BeGhGwPzmEFfSddLRhcYKqnBXBbiTeKO6CE3oxFcSYHzHC0iHbic-dAOxPxXsj0w78_xHZAOL4X8B_gRaJH5BuA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e12725-c84c-4dc9-ad65-5840ba22b417", "record_id": "flaws_cloudtrail:0000199:76e12725-c84c-4dc9-ad65-5840ba22b417", "row_index": 199, "timestamp": "2019-08-11T03:47:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e12725-c84c-4dc9-ad65-5840ba22b417", "eventTime": "2019-08-11T03:47:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e12725-c84c-4dc9-ad65-5840ba22b417", "record_id": "flaws_cloudtrail:0000200:76e12725-c84c-4dc9-ad65-5840ba22b417", "row_index": 200, "timestamp": "2019-08-11T03:47:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e12725-c84c-4dc9-ad65-5840ba22b417", "eventTime": "2019-08-11T03:47:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c31b86fc-a361-466f-8aea-7d507c91993e", "record_id": "flaws_cloudtrail:0000201:c31b86fc-a361-466f-8aea-7d507c91993e", "row_index": 201, "timestamp": "2019-08-11T03:52:08Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c31b86fc-a361-466f-8aea-7d507c91993e", "eventTime": "2019-08-11T03:52:08Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"credentials": {"accessKeyId": "ASIATZPRWS9IY6ZF2QKO", "expiration": "Aug 11, 2019 3:52:08 PM", "sessionToken": "FQoGZXIvYXdzED0aDJawEouvpeXfjl8k5SKsAZqRovqQN0ndsK3p9N+BphjpjcCODGeqYa66NNRIxiqoIezz3jXQMu826uYI4FwFLdxNXWjkjm19oO7A8MovgsK/6IDjJpvbRUHAyq6RMtE4Y3LofG1OsLTcjUiUKpYHwVQnrE7YLrbtvYWnPq56Z3hnMJIfXK4lZ1bFzF5FEYO47LEsVFjH244xmpHExqQPzdt2lphzaq0s6BHFBh3wbmtZy7FbTvkEl+x+i0ko6KG+6gU="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c31b86fc-a361-466f-8aea-7d507c91993e", "record_id": "flaws_cloudtrail:0000202:c31b86fc-a361-466f-8aea-7d507c91993e", "row_index": 202, "timestamp": "2019-08-11T03:52:08Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c31b86fc-a361-466f-8aea-7d507c91993e", "eventTime": "2019-08-11T03:52:08Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"credentials": {"accessKeyId": "ASIATZPRWS9IY6ZF2QKO", "expiration": "Aug 11, 2019 3:52:08 PM", "sessionToken": "FQoGZXIvYXdzED0aDJawEouvpeXfjl8k5SKsAZqRovqQN0ndsK3p9N+BphjpjcCODGeqYa66NNRIxiqoIezz3jXQMu826uYI4FwFLdxNXWjkjm19oO7A8MovgsK/6IDjJpvbRUHAyq6RMtE4Y3LofG1OsLTcjUiUKpYHwVQnrE7YLrbtvYWnPq56Z3hnMJIfXK4lZ1bFzF5FEYO47LEsVFjH244xmpHExqQPzdt2lphzaq0s6BHFBh3wbmtZy7FbTvkEl+x+i0ko6KG+6gU="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27df00b3-4ae3-4689-af28-5b91b1e7aaeb", "record_id": "flaws_cloudtrail:0000203:27df00b3-4ae3-4689-af28-5b91b1e7aaeb", "row_index": 203, "timestamp": "2019-08-11T03:54:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27df00b3-4ae3-4689-af28-5b91b1e7aaeb", "eventTime": "2019-08-11T03:54:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27df00b3-4ae3-4689-af28-5b91b1e7aaeb", "record_id": "flaws_cloudtrail:0000204:27df00b3-4ae3-4689-af28-5b91b1e7aaeb", "row_index": 204, "timestamp": "2019-08-11T03:54:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27df00b3-4ae3-4689-af28-5b91b1e7aaeb", "eventTime": "2019-08-11T03:54:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3ee051-72af-4a87-a060-47d66461bc54", "record_id": "flaws_cloudtrail:0000205:2b3ee051-72af-4a87-a060-47d66461bc54", "row_index": 205, "timestamp": "2019-08-11T04:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3ee051-72af-4a87-a060-47d66461bc54", "eventTime": "2019-08-11T04:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA01KBH13SQNDN5N5M", "expiration": "Aug 11, 2019 10:51:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3ee051-72af-4a87-a060-47d66461bc54", "record_id": "flaws_cloudtrail:0000206:2b3ee051-72af-4a87-a060-47d66461bc54", "row_index": 206, "timestamp": "2019-08-11T04:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3ee051-72af-4a87-a060-47d66461bc54", "eventTime": "2019-08-11T04:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA01KBH13SQNDN5N5M", "expiration": "Aug 11, 2019 10:51:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63c754a-8db8-4734-8ac6-06b5e518fbdf", "record_id": "flaws_cloudtrail:0000207:a63c754a-8db8-4734-8ac6-06b5e518fbdf", "row_index": 207, "timestamp": "2019-08-11T04:57:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63c754a-8db8-4734-8ac6-06b5e518fbdf", "eventTime": "2019-08-11T04:57:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63c754a-8db8-4734-8ac6-06b5e518fbdf", "record_id": "flaws_cloudtrail:0000208:a63c754a-8db8-4734-8ac6-06b5e518fbdf", "row_index": 208, "timestamp": "2019-08-11T04:57:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63c754a-8db8-4734-8ac6-06b5e518fbdf", "eventTime": "2019-08-11T04:57:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7ee1b0-cf7c-4bc7-86d8-d9e74aac7aab", "record_id": "flaws_cloudtrail:0000209:9c7ee1b0-cf7c-4bc7-86d8-d9e74aac7aab", "row_index": 209, "timestamp": "2019-08-11T04:57:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7ee1b0-cf7c-4bc7-86d8-d9e74aac7aab", "eventTime": "2019-08-11T04:57:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7ee1b0-cf7c-4bc7-86d8-d9e74aac7aab", "record_id": "flaws_cloudtrail:0000210:9c7ee1b0-cf7c-4bc7-86d8-d9e74aac7aab", "row_index": 210, "timestamp": "2019-08-11T04:57:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7ee1b0-cf7c-4bc7-86d8-d9e74aac7aab", "eventTime": "2019-08-11T04:57:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b54f9968-8e3f-46e1-b10e-3210ae3d50b9", "record_id": "flaws_cloudtrail:0000211:b54f9968-8e3f-46e1-b10e-3210ae3d50b9", "row_index": 211, "timestamp": "2019-08-11T04:57:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b54f9968-8e3f-46e1-b10e-3210ae3d50b9", "eventTime": "2019-08-11T04:57:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b54f9968-8e3f-46e1-b10e-3210ae3d50b9", "record_id": "flaws_cloudtrail:0000212:b54f9968-8e3f-46e1-b10e-3210ae3d50b9", "row_index": 212, "timestamp": "2019-08-11T04:57:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b54f9968-8e3f-46e1-b10e-3210ae3d50b9", "eventTime": "2019-08-11T04:57:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b21371-496f-4f66-a7cf-6ada33d60251", "record_id": "flaws_cloudtrail:0000213:31b21371-496f-4f66-a7cf-6ada33d60251", "row_index": 213, "timestamp": "2019-08-11T04:58:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b21371-496f-4f66-a7cf-6ada33d60251", "eventTime": "2019-08-11T04:58:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b21371-496f-4f66-a7cf-6ada33d60251", "record_id": "flaws_cloudtrail:0000214:31b21371-496f-4f66-a7cf-6ada33d60251", "row_index": 214, "timestamp": "2019-08-11T04:58:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAMPP3VXZHSJ2H0CRO", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b21371-496f-4f66-a7cf-6ada33d60251", "eventTime": "2019-08-11T04:58:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAMPP3VXZHSJ2H0CRO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T00:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd8f327d-a448-4605-8fcc-dc8201fe9444", "record_id": "flaws_cloudtrail:0000215:bd8f327d-a448-4605-8fcc-dc8201fe9444", "row_index": 215, "timestamp": "2019-08-11T04:59:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd8f327d-a448-4605-8fcc-dc8201fe9444", "eventTime": "2019-08-11T04:59:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd8f327d-a448-4605-8fcc-dc8201fe9444", "record_id": "flaws_cloudtrail:0000216:bd8f327d-a448-4605-8fcc-dc8201fe9444", "row_index": 216, "timestamp": "2019-08-11T04:59:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd8f327d-a448-4605-8fcc-dc8201fe9444", "eventTime": "2019-08-11T04:59:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95bd2757-33cc-46ef-8e08-cb3e4198d1c5", "record_id": "flaws_cloudtrail:0000217:95bd2757-33cc-46ef-8e08-cb3e4198d1c5", "row_index": 217, "timestamp": "2019-08-11T04:59:48Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95bd2757-33cc-46ef-8e08-cb3e4198d1c5", "eventTime": "2019-08-11T04:59:48Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95bd2757-33cc-46ef-8e08-cb3e4198d1c5", "record_id": "flaws_cloudtrail:0000218:95bd2757-33cc-46ef-8e08-cb3e4198d1c5", "row_index": 218, "timestamp": "2019-08-11T04:59:48Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95bd2757-33cc-46ef-8e08-cb3e4198d1c5", "eventTime": "2019-08-11T04:59:48Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0b2410a-ef0e-4282-81ad-3449403eacc3", "record_id": "flaws_cloudtrail:0000219:e0b2410a-ef0e-4282-81ad-3449403eacc3", "row_index": 219, "timestamp": "2019-08-11T05:03:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0b2410a-ef0e-4282-81ad-3449403eacc3", "eventTime": "2019-08-11T05:03:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0b2410a-ef0e-4282-81ad-3449403eacc3", "record_id": "flaws_cloudtrail:0000220:e0b2410a-ef0e-4282-81ad-3449403eacc3", "row_index": 220, "timestamp": "2019-08-11T05:03:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0b2410a-ef0e-4282-81ad-3449403eacc3", "eventTime": "2019-08-11T05:03:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a4fd90-ab47-4a37-9fe8-97a5c5f680e5", "record_id": "flaws_cloudtrail:0000221:d5a4fd90-ab47-4a37-9fe8-97a5c5f680e5", "row_index": 221, "timestamp": "2019-08-11T05:03:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a4fd90-ab47-4a37-9fe8-97a5c5f680e5", "eventTime": "2019-08-11T05:03:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2MU1teXdSc2VubEh6cUg0amd2SHlsU01FLzN6SFk2ZUJmTkZZRkdLb1c5dmxiTWZ1YjJYb0VHb2tsRDhVbEpTS1RxL2RUeWhvaC9BalpmQjlPdU9mTHl1bjZTclNhbmFKaVVLSzFFd3A0bGlEVE55cUMvaHJyVTU2RHpIdzVXOTJOV3ZDNXA0Z1hyYnVwbHNvZjVmckxsUXZqalJpMVpLamtmSGJzRFpoOXFKS0xkczNENll2SVZhL3YrY1BtTXVWK1hsMjRKbEZRNHpmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a4fd90-ab47-4a37-9fe8-97a5c5f680e5", "record_id": "flaws_cloudtrail:0000222:d5a4fd90-ab47-4a37-9fe8-97a5c5f680e5", "row_index": 222, "timestamp": "2019-08-11T05:03:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a4fd90-ab47-4a37-9fe8-97a5c5f680e5", "eventTime": "2019-08-11T05:03:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2MU1teXdSc2VubEh6cUg0amd2SHlsU01FLzN6SFk2ZUJmTkZZRkdLb1c5dmxiTWZ1YjJYb0VHb2tsRDhVbEpTS1RxL2RUeWhvaC9BalpmQjlPdU9mTHl1bjZTclNhbmFKaVVLSzFFd3A0bGlEVE55cUMvaHJyVTU2RHpIdzVXOTJOV3ZDNXA0Z1hyYnVwbHNvZjVmckxsUXZqalJpMVpLamtmSGJzRFpoOXFKS0xkczNENll2SVZhL3YrY1BtTXVWK1hsMjRKbEZRNHpmdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6d35fed-bac4-457c-b406-f79906", "record_id": "flaws_cloudtrail:0000223:f6d35fed-bac4-457c-b406-f79906", "row_index": 223, "timestamp": "2019-08-11T05:03:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6d35fed-bac4-457c-b406-f79906", "eventTime": "2019-08-11T05:03:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMS1dISkNRcWVPRlNqWkhsMFRndXQvc3RJTU9UMXF1WDVoUDZDVkhuNzFWTG5pZjFaQ1JMMmNRZU9GYnYxcjR6RTE5MnJhRk1pOEh0Z3F1YkhYd2RvbktwdDVjaG5DUm5OK216UlhtM2hSVDNvL3ppK29mcUxwVGtLVkhka2ttZU1RcEFST0JoRFZyVlFNY2lXcmhheEQ5bW04azVpUzZXMzRMMXF3am1ybDIvQU1SSGQvck9vTm5COTRqbzVLZXk3V3E2ZXp2eFZGRkVuQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6d35fed-bac4-457c-b406-f79906", "record_id": "flaws_cloudtrail:0000224:f6d35fed-bac4-457c-b406-f79906", "row_index": 224, "timestamp": "2019-08-11T05:03:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6d35fed-bac4-457c-b406-f79906", "eventTime": "2019-08-11T05:03:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMS1dISkNRcWVPRlNqWkhsMFRndXQvc3RJTU9UMXF1WDVoUDZDVkhuNzFWTG5pZjFaQ1JMMmNRZU9GYnYxcjR6RTE5MnJhRk1pOEh0Z3F1YkhYd2RvbktwdDVjaG5DUm5OK216UlhtM2hSVDNvL3ppK29mcUxwVGtLVkhka2ttZU1RcEFST0JoRFZyVlFNY2lXcmhheEQ5bW04azVpUzZXMzRMMXF3am1ybDIvQU1SSGQvck9vTm5COTRqbzVLZXk3V3E2ZXp2eFZGRkVuQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b401f528-a6f7-485b-976a-a81c9a57e901", "record_id": "flaws_cloudtrail:0000225:b401f528-a6f7-485b-976a-a81c9a57e901", "row_index": 225, "timestamp": "2019-08-11T05:03:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b401f528-a6f7-485b-976a-a81c9a57e901", "eventTime": "2019-08-11T05:03:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeUVsTkkwRWFEWDNxT1ByNzRTZy9zVHdQZHBXTVQ2YW96V2ppcExBWFBiWVhwM0toOTJLUGxNRVRYU1NtQlRQbk93czFiNU1VRTF1aU9UMTVjT3o5UjVvcjQ1UUEzNUdjeEdDZVdQMVpiMTV4K0dua2FkUWdScXV1UVlFQjFvbkdFZVZ0MFNyM2NtUVQ2Q3hYYjlVYVh2cklXbTRPTkZ6Z1BpL2cvNy9pU2xXNkdwS1hIdVhXc1ZwQk43ZzQ2bHI4SVJDWllvRm9IeE5UZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b401f528-a6f7-485b-976a-a81c9a57e901", "record_id": "flaws_cloudtrail:0000226:b401f528-a6f7-485b-976a-a81c9a57e901", "row_index": 226, "timestamp": "2019-08-11T05:03:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b401f528-a6f7-485b-976a-a81c9a57e901", "eventTime": "2019-08-11T05:03:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeUVsTkkwRWFEWDNxT1ByNzRTZy9zVHdQZHBXTVQ2YW96V2ppcExBWFBiWVhwM0toOTJLUGxNRVRYU1NtQlRQbk93czFiNU1VRTF1aU9UMTVjT3o5UjVvcjQ1UUEzNUdjeEdDZVdQMVpiMTV4K0dua2FkUWdScXV1UVlFQjFvbkdFZVZ0MFNyM2NtUVQ2Q3hYYjlVYVh2cklXbTRPTkZ6Z1BpL2cvNy9pU2xXNkdwS1hIdVhXc1ZwQk43ZzQ2bHI4SVJDWllvRm9IeE5UZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c04afd-7bc7-438c-9db9-fba17c3efa8b", "record_id": "flaws_cloudtrail:0000227:11c04afd-7bc7-438c-9db9-fba17c3efa8b", "row_index": 227, "timestamp": "2019-08-11T05:03:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c04afd-7bc7-438c-9db9-fba17c3efa8b", "eventTime": "2019-08-11T05:03:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtN20wNGZTUzZRSGxUU0ljVXJUL0tMZzF3UU55cHFCc3poY3dzamRlZXNBRitqZituT1RSZFFITHMwUXB6bEh0dEF6Y0ZGRGR5MDg4YU5qNER2NU9BeDRNUW96ZlRiVWY4cm9BdWZ4L2dVMks4dEQ3QTFIZ1NDcDhBYTRORnQ2b3M5cjB4WVN3UGVHYkdTaUFyVWZiUHBTd2gvRUNaMmpZNGY0WEZHdjhGTnVENjhvNDdIQm15ajdyWU42SEJpUGV0VkdvZnNQNmdKREdvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c04afd-7bc7-438c-9db9-fba17c3efa8b", "record_id": "flaws_cloudtrail:0000228:11c04afd-7bc7-438c-9db9-fba17c3efa8b", "row_index": 228, "timestamp": "2019-08-11T05:03:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c04afd-7bc7-438c-9db9-fba17c3efa8b", "eventTime": "2019-08-11T05:03:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtN20wNGZTUzZRSGxUU0ljVXJUL0tMZzF3UU55cHFCc3poY3dzamRlZXNBRitqZituT1RSZFFITHMwUXB6bEh0dEF6Y0ZGRGR5MDg4YU5qNER2NU9BeDRNUW96ZlRiVWY4cm9BdWZ4L2dVMks4dEQ3QTFIZ1NDcDhBYTRORnQ2b3M5cjB4WVN3UGVHYkdTaUFyVWZiUHBTd2gvRUNaMmpZNGY0WEZHdjhGTnVENjhvNDdIQm15ajdyWU42SEJpUGV0VkdvZnNQNmdKREdvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd0bceac-6867-4d61-94fb-96088d06314d", "record_id": "flaws_cloudtrail:0000229:fd0bceac-6867-4d61-94fb-96088d06314d", "row_index": 229, "timestamp": "2019-08-11T05:03:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd0bceac-6867-4d61-94fb-96088d06314d", "eventTime": "2019-08-11T05:03:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtWnNlS2RRZ2pWL0ZKVlcxUE1FWStGRG1VdHlENW1xdFhrbUVycTZZOWtnSzBzYjU4VTlubWVSN01hWENJREdzK2dmUW9Qc1N1Mm5MRTNGNUJxZE0vRkJqQXZTdS9GZW9kS0lhUnpqUkRyQ3JxL3pTMlVHOTFDYlNub2ttUUNrUWMvZFludStudXlmWlpPS1dBQWlSK0ZYYnJnKzBWWWE4bkRxcjNmUDVnQXI3Qnl2TGZ4V3ZNVm1Od3liVHFNREJmeWdsSVFOUWF2TXl5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd0bceac-6867-4d61-94fb-96088d06314d", "record_id": "flaws_cloudtrail:0000230:fd0bceac-6867-4d61-94fb-96088d06314d", "row_index": 230, "timestamp": "2019-08-11T05:03:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd0bceac-6867-4d61-94fb-96088d06314d", "eventTime": "2019-08-11T05:03:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtWnNlS2RRZ2pWL0ZKVlcxUE1FWStGRG1VdHlENW1xdFhrbUVycTZZOWtnSzBzYjU4VTlubWVSN01hWENJREdzK2dmUW9Qc1N1Mm5MRTNGNUJxZE0vRkJqQXZTdS9GZW9kS0lhUnpqUkRyQ3JxL3pTMlVHOTFDYlNub2ttUUNrUWMvZFludStudXlmWlpPS1dBQWlSK0ZYYnJnKzBWWWE4bkRxcjNmUDVnQXI3Qnl2TGZ4V3ZNVm1Od3liVHFNREJmeWdsSVFOUWF2TXl5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f61596-e766-4959-96b7-084bd18270", "record_id": "flaws_cloudtrail:0000231:b5f61596-e766-4959-96b7-084bd18270", "row_index": 231, "timestamp": "2019-08-11T05:03:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f61596-e766-4959-96b7-084bd18270", "eventTime": "2019-08-11T05:03:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtd2sxZzNmQlI2c2FaQVZNaXNVTmRnQm5ua3VoeU9sa2ROR2I0bzVPdldoN3hMM1NVa1lCQ2tZVnpOUm90cGZFamVuUUtJWWp0UHpRaWZXOHdOd09WL3BwNXUyTkRwRUhiQzEydjJ6UjBZMFNGeWVaZ3VEeEEraVpZYW55SGhHKzhzcGFsWEtSa3FvbUJtMUtKeGpKdi9CaWlZTWczeWh4N2sraDlXM2tsZVppSFRFK1BDM2Q3UzVCbDQ2ZUl0RkZNcSt1anJVdENUajZ1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f61596-e766-4959-96b7-084bd18270", "record_id": "flaws_cloudtrail:0000232:b5f61596-e766-4959-96b7-084bd18270", "row_index": 232, "timestamp": "2019-08-11T05:03:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f61596-e766-4959-96b7-084bd18270", "eventTime": "2019-08-11T05:03:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtd2sxZzNmQlI2c2FaQVZNaXNVTmRnQm5ua3VoeU9sa2ROR2I0bzVPdldoN3hMM1NVa1lCQ2tZVnpOUm90cGZFamVuUUtJWWp0UHpRaWZXOHdOd09WL3BwNXUyTkRwRUhiQzEydjJ6UjBZMFNGeWVaZ3VEeEEraVpZYW55SGhHKzhzcGFsWEtSa3FvbUJtMUtKeGpKdi9CaWlZTWczeWh4N2sraDlXM2tsZVppSFRFK1BDM2Q3UzVCbDQ2ZUl0RkZNcSt1anJVdENUajZ1dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d700053f3-935d-4ba1-a26d-b1704d5000c0", "record_id": "flaws_cloudtrail:0000233:d700053f3-935d-4ba1-a26d-b1704d5000c0", "row_index": 233, "timestamp": "2019-08-11T05:03:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d700053f3-935d-4ba1-a26d-b1704d5000c0", "eventTime": "2019-08-11T05:03:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVYnNGMVI3SDlpMklvb3BFTWRrM05vejZJOHFUeU15bjlsK0Zzd1dmMlg5NE85QTlHZUVrc2hHYlpOTkgrTUJkby9EcXZQbnQ5S0lwT0xYY2FSbUFFU2lMRi9hUkJGVTdZZDhYeURtTlh4OGhlSWM0QnJaQzBRNzZCVG50T2kzUjRtOVlXbHEwcDFDZHM5TXN4T2pMNmlJcFVTR25mUUw2WWlQSHB3ZWwwUlFjaThwU2JQYWpOeE0xd1NORi9nVHMwNFY0dm9qRVBSejRHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d700053f3-935d-4ba1-a26d-b1704d5000c0", "record_id": "flaws_cloudtrail:0000234:d700053f3-935d-4ba1-a26d-b1704d5000c0", "row_index": 234, "timestamp": "2019-08-11T05:03:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d700053f3-935d-4ba1-a26d-b1704d5000c0", "eventTime": "2019-08-11T05:03:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVYnNGMVI3SDlpMklvb3BFTWRrM05vejZJOHFUeU15bjlsK0Zzd1dmMlg5NE85QTlHZUVrc2hHYlpOTkgrTUJkby9EcXZQbnQ5S0lwT0xYY2FSbUFFU2lMRi9hUkJGVTdZZDhYeURtTlh4OGhlSWM0QnJaQzBRNzZCVG50T2kzUjRtOVlXbHEwcDFDZHM5TXN4T2pMNmlJcFVTR25mUUw2WWlQSHB3ZWwwUlFjaThwU2JQYWpOeE0xd1NORi9nVHMwNFY0dm9qRVBSejRHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716f5781-cc19-4627-b878-1c23788c3d", "record_id": "flaws_cloudtrail:0000235:716f5781-cc19-4627-b878-1c23788c3d", "row_index": 235, "timestamp": "2019-08-11T05:03:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716f5781-cc19-4627-b878-1c23788c3d", "eventTime": "2019-08-11T05:03:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRaStTVjRVVmJUMDZsajAvTnJyS0o5b0szTVk5Qm5pN3lwdzJTR1FaL2pMTWFiQXZOVXRaYlRGd2JyOXptbnRja1JvamlQYVprQTRYZFVVSCs0S3ZNREsvb2lXRTE0c28yQ2FaKzFkNStCd1pvZjMyNzNOS3ZoVTJGcXFkdjJ2ODdlL2ViZFA3RG1MRmdlRFhxRWk0MEtrMFpmSVBDd3IzM2F6bE50Rm9uODdzUnRTdHpBNExCV0JQUTdVMnpKbzNVQ2xZYTVYaXhiNWl2dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716f5781-cc19-4627-b878-1c23788c3d", "record_id": "flaws_cloudtrail:0000236:716f5781-cc19-4627-b878-1c23788c3d", "row_index": 236, "timestamp": "2019-08-11T05:03:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716f5781-cc19-4627-b878-1c23788c3d", "eventTime": "2019-08-11T05:03:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRaStTVjRVVmJUMDZsajAvTnJyS0o5b0szTVk5Qm5pN3lwdzJTR1FaL2pMTWFiQXZOVXRaYlRGd2JyOXptbnRja1JvamlQYVprQTRYZFVVSCs0S3ZNREsvb2lXRTE0c28yQ2FaKzFkNStCd1pvZjMyNzNOS3ZoVTJGcXFkdjJ2ODdlL2ViZFA3RG1MRmdlRFhxRWk0MEtrMFpmSVBDd3IzM2F6bE50Rm9uODdzUnRTdHpBNExCV0JQUTdVMnpKbzNVQ2xZYTVYaXhiNWl2dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90513e0-bed8-463a-9d61-bcf8aad37e4e", "record_id": "flaws_cloudtrail:0000237:90513e0-bed8-463a-9d61-bcf8aad37e4e", "row_index": 237, "timestamp": "2019-08-11T05:03:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90513e0-bed8-463a-9d61-bcf8aad37e4e", "eventTime": "2019-08-11T05:03:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvQ3lRSnVCeTJZUTFuT0plR0lBTVNXZ0I0amZpT2FxTGtvaUFBaGZrZFVRK00xZGc3TUFNL0NVMHFUZUZFQ3k1Y09VMklyZ0lLYjlheDk4MVVJSDZab2tRS3lkc1VibFpJKzNma2p4cDNxMGd6dEtNK3VEV1pOYklTb25vWVNTeGxnRmVzN3hsRjAzQ1pubmtIUGJHTFhXbTZLYmJtYjNvdmVnMmNkZ01ZcHhKWU40MUpiMUlMVklyV2lkdU95S0M3emovRzM3eGZhUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90513e0-bed8-463a-9d61-bcf8aad37e4e", "record_id": "flaws_cloudtrail:0000238:90513e0-bed8-463a-9d61-bcf8aad37e4e", "row_index": 238, "timestamp": "2019-08-11T05:03:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90513e0-bed8-463a-9d61-bcf8aad37e4e", "eventTime": "2019-08-11T05:03:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvQ3lRSnVCeTJZUTFuT0plR0lBTVNXZ0I0amZpT2FxTGtvaUFBaGZrZFVRK00xZGc3TUFNL0NVMHFUZUZFQ3k1Y09VMklyZ0lLYjlheDk4MVVJSDZab2tRS3lkc1VibFpJKzNma2p4cDNxMGd6dEtNK3VEV1pOYklTb25vWVNTeGxnRmVzN3hsRjAzQ1pubmtIUGJHTFhXbTZLYmJtYjNvdmVnMmNkZ01ZcHhKWU40MUpiMUlMVklyV2lkdU95S0M3emovRzM3eGZhUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc89c32e-1c5b-416d-828c-6c72abc9991b", "record_id": "flaws_cloudtrail:0000239:bc89c32e-1c5b-416d-828c-6c72abc9991b", "row_index": 239, "timestamp": "2019-08-11T05:03:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc89c32e-1c5b-416d-828c-6c72abc9991b", "eventTime": "2019-08-11T05:03:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrZ2IzUlRsUnFyZmpJK3RpYWw4eHZoYTQrQWdQS3RqZFdaM0ZxajkvZXhkM2FSdElyN3JJc0pYMklwTVdJNHl2UnV2enZLVndBbWsyY1RTVkZUT1JWYi9Tck5FTXFDZjZXK0c2TjRCVTZTZFcyNjF0d2pnQlg1UUZJSXlHQ09hU0RabVpXSDJzRUhPL3l3L3BmTE1xNS9sL0VwTDhwTUNuMkVlMGNFNXd3ZnZ3Q1AwOVoxL2dMTzdIV3BPUENzcGhhMmZaUjN4Nm5qMmlaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc89c32e-1c5b-416d-828c-6c72abc9991b", "record_id": "flaws_cloudtrail:0000240:bc89c32e-1c5b-416d-828c-6c72abc9991b", "row_index": 240, "timestamp": "2019-08-11T05:03:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc89c32e-1c5b-416d-828c-6c72abc9991b", "eventTime": "2019-08-11T05:03:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrZ2IzUlRsUnFyZmpJK3RpYWw4eHZoYTQrQWdQS3RqZFdaM0ZxajkvZXhkM2FSdElyN3JJc0pYMklwTVdJNHl2UnV2enZLVndBbWsyY1RTVkZUT1JWYi9Tck5FTXFDZjZXK0c2TjRCVTZTZFcyNjF0d2pnQlg1UUZJSXlHQ09hU0RabVpXSDJzRUhPL3l3L3BmTE1xNS9sL0VwTDhwTUNuMkVlMGNFNXd3ZnZ3Q1AwOVoxL2dMTzdIV3BPUENzcGhhMmZaUjN4Nm5qMmlaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeabf57f-6bdc-425c-816f-3be2dd043012", "record_id": "flaws_cloudtrail:0000241:aeabf57f-6bdc-425c-816f-3be2dd043012", "row_index": 241, "timestamp": "2019-08-11T05:04:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeabf57f-6bdc-425c-816f-3be2dd043012", "eventTime": "2019-08-11T05:04:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXS1ZjdHpQeDdSTTN6L2p0SVJKN3I4TlY0eUw5b3A2Q2NKOEtqL1Zjc2JrdHllMlBHRElTLzIrOVVWK1F2UkJYRTAzRThQTjRRQWUrUnorU2pzNVZ6bENuL3d3aXVib2lDQlZFeXVhMEozRHA1UjNFZmEzMWxDOW9hUlZZS0hKdDRJRWkrWU43TWxGbk1rSVpVMUg1dVh4endzZ1dVMFAvZWRVbWNDQnVFcnFRWFhHWUlYQnhJNnp3aHQyZHZtQ0VGZk55RmRTMUFZSHRkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeabf57f-6bdc-425c-816f-3be2dd043012", "record_id": "flaws_cloudtrail:0000242:aeabf57f-6bdc-425c-816f-3be2dd043012", "row_index": 242, "timestamp": "2019-08-11T05:04:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeabf57f-6bdc-425c-816f-3be2dd043012", "eventTime": "2019-08-11T05:04:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXS1ZjdHpQeDdSTTN6L2p0SVJKN3I4TlY0eUw5b3A2Q2NKOEtqL1Zjc2JrdHllMlBHRElTLzIrOVVWK1F2UkJYRTAzRThQTjRRQWUrUnorU2pzNVZ6bENuL3d3aXVib2lDQlZFeXVhMEozRHA1UjNFZmEzMWxDOW9hUlZZS0hKdDRJRWkrWU43TWxGbk1rSVpVMUg1dVh4endzZ1dVMFAvZWRVbWNDQnVFcnFRWFhHWUlYQnhJNnp3aHQyZHZtQ0VGZk55RmRTMUFZSHRkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e46571-e794-4bb1-afb3-51327bb2e4bc", "record_id": "flaws_cloudtrail:0000243:e46571-e794-4bb1-afb3-51327bb2e4bc", "row_index": 243, "timestamp": "2019-08-11T05:04:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e46571-e794-4bb1-afb3-51327bb2e4bc", "eventTime": "2019-08-11T05:04:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZeTNvT24vYUJnL1Y5WGN6VXVuaGRINDlWZzZBR3dsMEZ0b0EzZXhzTDM3cVowSHZ6VHlBcTkvUTFlV3JZM2VJRWorT0ZkbnZmVHVoajYyeXV4cVlob3M2QWFIa29mTDBBYjVRTUFYR1FkdzVsZWt2VlMrMlZRVG5rS1BBV2E3NzBSMDZFVnhkdzRqZjUyUTdMdjI0Qmp3eUd2S0ZoUWYraXdObVZqRVoyK3BKUEJ1OXdtb0lIVnFUa0Z0bWpIL2daWkQ3T0lCQ25RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e46571-e794-4bb1-afb3-51327bb2e4bc", "record_id": "flaws_cloudtrail:0000244:e46571-e794-4bb1-afb3-51327bb2e4bc", "row_index": 244, "timestamp": "2019-08-11T05:04:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e46571-e794-4bb1-afb3-51327bb2e4bc", "eventTime": "2019-08-11T05:04:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZeTNvT24vYUJnL1Y5WGN6VXVuaGRINDlWZzZBR3dsMEZ0b0EzZXhzTDM3cVowSHZ6VHlBcTkvUTFlV3JZM2VJRWorT0ZkbnZmVHVoajYyeXV4cVlob3M2QWFIa29mTDBBYjVRTUFYR1FkdzVsZWt2VlMrMlZRVG5rS1BBV2E3NzBSMDZFVnhkdzRqZjUyUTdMdjI0Qmp3eUd2S0ZoUWYraXdObVZqRVoyK3BKUEJ1OXdtb0lIVnFUa0Z0bWpIL2daWkQ3T0lCQ25RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89efaffa-1993-4879-b9de-638642bab5e9", "record_id": "flaws_cloudtrail:0000245:89efaffa-1993-4879-b9de-638642bab5e9", "row_index": 245, "timestamp": "2019-08-11T05:04:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89efaffa-1993-4879-b9de-638642bab5e9", "eventTime": "2019-08-11T05:04:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJha0tJR0tzSml2Nm9XOVRGT1pOQ2tYR3BFbWdKV1J6ajFvTE51b0V0NFlCOFZITWN5Q0JRQS9FMk95SFljYmg0TUJVa3psZnY1RXkwVXdZWXFMeDlBZGRhUDFsWWh3bjlzMkJoOTlrTHdjUTIvSlMzMVU3NXRhWUtWQy9VZ2gwMzRsbXp6cFVGWHpPOXdBcTQrTE9KMndyWHkveXFRcUk1STNuWlh1d1hvWUNCT0RxSC9RMkpiaU1aOUhCZ3dJM3grVjNsY1YzMXN4bktDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89efaffa-1993-4879-b9de-638642bab5e9", "record_id": "flaws_cloudtrail:0000246:89efaffa-1993-4879-b9de-638642bab5e9", "row_index": 246, "timestamp": "2019-08-11T05:04:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89efaffa-1993-4879-b9de-638642bab5e9", "eventTime": "2019-08-11T05:04:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJha0tJR0tzSml2Nm9XOVRGT1pOQ2tYR3BFbWdKV1J6ajFvTE51b0V0NFlCOFZITWN5Q0JRQS9FMk95SFljYmg0TUJVa3psZnY1RXkwVXdZWXFMeDlBZGRhUDFsWWh3bjlzMkJoOTlrTHdjUTIvSlMzMVU3NXRhWUtWQy9VZ2gwMzRsbXp6cFVGWHpPOXdBcTQrTE9KMndyWHkveXFRcUk1STNuWlh1d1hvWUNCT0RxSC9RMkpiaU1aOUhCZ3dJM3grVjNsY1YzMXN4bktDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7f115d2-dd4e-4e52-99f3-0320edc4152a", "record_id": "flaws_cloudtrail:0000247:b7f115d2-dd4e-4e52-99f3-0320edc4152a", "row_index": 247, "timestamp": "2019-08-11T05:04:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7f115d2-dd4e-4e52-99f3-0320edc4152a", "eventTime": "2019-08-11T05:04:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4TGU4eTRCZWdhUHNLSTE1MnZtY3JvMzkyUGQwazN6eDl6T1NpSHc3a1puL1VickMyVlY2VVhMM29XQXhNanQ5TjNvUDNGdHNLTlJOY2YwSitUcU52dTh1QTI0YlV5bVlCTExxbzhCc2dwU013cURKSlFNTWJNU3VTeEQvOEJrc2Uzak9seFNZNDBnWU1qRFRPczRGUjZlZE42WVBMUldveS9hcFNlcWJXdXpHSTdTRGIzMmxjTlZoWWY0c0sxUlRFQXcvdmdPWS9NNmErb1FtcmRwK2piQWlVeDdXSG5rPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7f115d2-dd4e-4e52-99f3-0320edc4152a", "record_id": "flaws_cloudtrail:0000248:b7f115d2-dd4e-4e52-99f3-0320edc4152a", "row_index": 248, "timestamp": "2019-08-11T05:04:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7f115d2-dd4e-4e52-99f3-0320edc4152a", "eventTime": "2019-08-11T05:04:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4TGU4eTRCZWdhUHNLSTE1MnZtY3JvMzkyUGQwazN6eDl6T1NpSHc3a1puL1VickMyVlY2VVhMM29XQXhNanQ5TjNvUDNGdHNLTlJOY2YwSitUcU52dTh1QTI0YlV5bVlCTExxbzhCc2dwU013cURKSlFNTWJNU3VTeEQvOEJrc2Uzak9seFNZNDBnWU1qRFRPczRGUjZlZE42WVBMUldveS9hcFNlcWJXdXpHSTdTRGIzMmxjTlZoWWY0c0sxUlRFQXcvdmdPWS9NNmErb1FtcmRwK2piQWlVeDdXSG5rPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a765b461-46b4-4416-a886-1c4ebfa38ed6", "record_id": "flaws_cloudtrail:0000249:a765b461-46b4-4416-a886-1c4ebfa38ed6", "row_index": 249, "timestamp": "2019-08-11T05:04:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a765b461-46b4-4416-a886-1c4ebfa38ed6", "eventTime": "2019-08-11T05:04:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmUk9sU3FvRUN3RFBRMnd4ekwyV0IvbU9EaDhHM3ZWaXNvSXFhVFJXakUvZ2dNbXhUcUhhWkV3aVdPcks3ZDRHZ3FvTXlKQlJ1dC90TFNTLzZFRWpIMzQ0U095dXNwV2UxRHpzamJhNXBvYUJzRkg0NUpPc0ZNL29wTmsyZWhYK3FwMTFsRG5aYWNQak9ReUxsWU5FWFpyOWhPTkMvUVJiNTJneGl3Nlo2NWRPVVhLRTUwY0NuWEREVkhyaVI1a3ZpSWN5WWpkM1hDRHExSHIzVUpaMFpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a765b461-46b4-4416-a886-1c4ebfa38ed6", "record_id": "flaws_cloudtrail:0000250:a765b461-46b4-4416-a886-1c4ebfa38ed6", "row_index": 250, "timestamp": "2019-08-11T05:04:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a765b461-46b4-4416-a886-1c4ebfa38ed6", "eventTime": "2019-08-11T05:04:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmUk9sU3FvRUN3RFBRMnd4ekwyV0IvbU9EaDhHM3ZWaXNvSXFhVFJXakUvZ2dNbXhUcUhhWkV3aVdPcks3ZDRHZ3FvTXlKQlJ1dC90TFNTLzZFRWpIMzQ0U095dXNwV2UxRHpzamJhNXBvYUJzRkg0NUpPc0ZNL29wTmsyZWhYK3FwMTFsRG5aYWNQak9ReUxsWU5FWFpyOWhPTkMvUVJiNTJneGl3Nlo2NWRPVVhLRTUwY0NuWEREVkhyaVI1a3ZpSWN5WWpkM1hDRHExSHIzVUpaMFpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01b09f6-959a-4bed-b348-361927bbe7e9d", "record_id": "flaws_cloudtrail:0000251:f01b09f6-959a-4bed-b348-361927bbe7e9d", "row_index": 251, "timestamp": "2019-08-11T05:04:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01b09f6-959a-4bed-b348-361927bbe7e9d", "eventTime": "2019-08-11T05:04:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVNjFhYTN4dldONFo4WFNRUUVHN2pLVGNyRnliek1YTDJ4L0llbnd5cnRGcVBXSEd5U2FiUlBzbzRVUm1vTDZaTnN2cGxaRzhYV01MWVVTdGcraWM3TXpzdEE5bCt4bzVOMEo0V2dRRlNqNHhvcUMzd1k1SFBaS1dhMmwwSDhIMG9BUEtpWklJOGUvQm9xK2VzUVFDaG91NjZIN0ZNeWcvL1A4elFQSjRIRXl6WEhlbUp5SVBpMmV4ZWxveEYyTjBTWmUycEJCeTd2MjJFa2ZpZTJLVlljYzVsNERHdG80PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01b09f6-959a-4bed-b348-361927bbe7e9d", "record_id": "flaws_cloudtrail:0000252:f01b09f6-959a-4bed-b348-361927bbe7e9d", "row_index": 252, "timestamp": "2019-08-11T05:04:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01b09f6-959a-4bed-b348-361927bbe7e9d", "eventTime": "2019-08-11T05:04:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVNjFhYTN4dldONFo4WFNRUUVHN2pLVGNyRnliek1YTDJ4L0llbnd5cnRGcVBXSEd5U2FiUlBzbzRVUm1vTDZaTnN2cGxaRzhYV01MWVVTdGcraWM3TXpzdEE5bCt4bzVOMEo0V2dRRlNqNHhvcUMzd1k1SFBaS1dhMmwwSDhIMG9BUEtpWklJOGUvQm9xK2VzUVFDaG91NjZIN0ZNeWcvL1A4elFQSjRIRXl6WEhlbUp5SVBpMmV4ZWxveEYyTjBTWmUycEJCeTd2MjJFa2ZpZTJLVlljYzVsNERHdG80PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5de977-b6a0-417f-8e69-95902c481", "record_id": "flaws_cloudtrail:0000253:3d5de977-b6a0-417f-8e69-95902c481", "row_index": 253, "timestamp": "2019-08-11T05:04:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5de977-b6a0-417f-8e69-95902c481", "eventTime": "2019-08-11T05:04:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5UXhPT291N0xla3kzOFBqMXcxakhNeG92RGdKZ3NyYlVZbExWNnBiVytrWk1DVWFaS3RQVFBQS0xHbGtpaFpBUGg4M0huY0tZRG94ZG5qelBCRWphb1hmNkdYbndHaWkyMGFxL0E1cVFKRkFGWi93ZU5xK0dlR2cwak1pZGdHcDgvVll2L2dKVTh1WjhnNG5kZU9uUFpIMnA0enE4bkIzVG5qaWZLWmUrRDJack1NejdxbWtjSGVubUR0aG1rVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5de977-b6a0-417f-8e69-95902c481", "record_id": "flaws_cloudtrail:0000254:3d5de977-b6a0-417f-8e69-95902c481", "row_index": 254, "timestamp": "2019-08-11T05:04:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5de977-b6a0-417f-8e69-95902c481", "eventTime": "2019-08-11T05:04:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5UXhPT291N0xla3kzOFBqMXcxakhNeG92RGdKZ3NyYlVZbExWNnBiVytrWk1DVWFaS3RQVFBQS0xHbGtpaFpBUGg4M0huY0tZRG94ZG5qelBCRWphb1hmNkdYbndHaWkyMGFxL0E1cVFKRkFGWi93ZU5xK0dlR2cwak1pZGdHcDgvVll2L2dKVTh1WjhnNG5kZU9uUFpIMnA0enE4bkIzVG5qaWZLWmUrRDJack1NejdxbWtjSGVubUR0aG1rVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "837debce-cff9-4259-8e46-9e632a929c0f", "record_id": "flaws_cloudtrail:0000255:837debce-cff9-4259-8e46-9e632a929c0f", "row_index": 255, "timestamp": "2019-08-11T05:04:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "837debce-cff9-4259-8e46-9e632a929c0f", "eventTime": "2019-08-11T05:04:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHSm9abGJXbjN1YzhxTEtyUG9FWWUyTUN2RnJoa3BnR0V1WXNJaEQ4K242aXZCMno1elAram5IZXhpcDdlRVJyVHB5MzAydUNxMzFLWk9xK3I3c050SnFCdVJaN3dXSHF6SFNMN3dJQnFYb3VGWCtvZ0Z4YnpzdkVxM1F0QUVvS2JnZm0wcUZRbTQvVVdOQlJMcHZuUVF2ZXJjeFh6WDltYW5hRk1sc0tqaTd4T2hrNDJVVzY5aUgzTnpIZXRLQzJqeFNEQVAzeVhpcXpKRkMveWhPTEJkZEo5WjlvRDVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "837debce-cff9-4259-8e46-9e632a929c0f", "record_id": "flaws_cloudtrail:0000256:837debce-cff9-4259-8e46-9e632a929c0f", "row_index": 256, "timestamp": "2019-08-11T05:04:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "837debce-cff9-4259-8e46-9e632a929c0f", "eventTime": "2019-08-11T05:04:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHSm9abGJXbjN1YzhxTEtyUG9FWWUyTUN2RnJoa3BnR0V1WXNJaEQ4K242aXZCMno1elAram5IZXhpcDdlRVJyVHB5MzAydUNxMzFLWk9xK3I3c050SnFCdVJaN3dXSHF6SFNMN3dJQnFYb3VGWCtvZ0Z4YnpzdkVxM1F0QUVvS2JnZm0wcUZRbTQvVVdOQlJMcHZuUVF2ZXJjeFh6WDltYW5hRk1sc0tqaTd4T2hrNDJVVzY5aUgzTnpIZXRLQzJqeFNEQVAzeVhpcXpKRkMveWhPTEJkZEo5WjlvRDVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3777eec-29b5-4ace-accb-49fff3c351ff", "record_id": "flaws_cloudtrail:0000257:f3777eec-29b5-4ace-accb-49fff3c351ff", "row_index": 257, "timestamp": "2019-08-11T05:04:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3777eec-29b5-4ace-accb-49fff3c351ff", "eventTime": "2019-08-11T05:04:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqYzBLUXFvWFNMWm0zSWRoRExud3dDNmxWNFNyR1NRU24rZGFnS0R2M0o1NjZEVGI4M1hscmFoVlRNMDhLSE52a3ZGdHZ2VGVhNkVlcDB6QVRYMXQ3K1k4Z2R1N0hxbVhJck9OY095VkF2UC9ZWFVQbjd5cUwrU2hoZ2haTGVsaVh0UVFyQk1xTy9WdlNJdEJDWXB3RzNWZjArQjJlWEMvSnY1ZHNUalRHZHhaZ2wyTlR2emlTRUQ0T2NjYU9lTnNKYXV5ZU9Wb2xqa1ZhNDR0NjFwaFJ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3777eec-29b5-4ace-accb-49fff3c351ff", "record_id": "flaws_cloudtrail:0000258:f3777eec-29b5-4ace-accb-49fff3c351ff", "row_index": 258, "timestamp": "2019-08-11T05:04:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3777eec-29b5-4ace-accb-49fff3c351ff", "eventTime": "2019-08-11T05:04:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqYzBLUXFvWFNMWm0zSWRoRExud3dDNmxWNFNyR1NRU24rZGFnS0R2M0o1NjZEVGI4M1hscmFoVlRNMDhLSE52a3ZGdHZ2VGVhNkVlcDB6QVRYMXQ3K1k4Z2R1N0hxbVhJck9OY095VkF2UC9ZWFVQbjd5cUwrU2hoZ2haTGVsaVh0UVFyQk1xTy9WdlNJdEJDWXB3RzNWZjArQjJlWEMvSnY1ZHNUalRHZHhaZ2wyTlR2emlTRUQ0T2NjYU9lTnNKYXV5ZU9Wb2xqa1ZhNDR0NjFwaFJ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5881f10b-098a-4eb0-b22d-46c5285ca936", "record_id": "flaws_cloudtrail:0000259:5881f10b-098a-4eb0-b22d-46c5285ca936", "row_index": 259, "timestamp": "2019-08-11T05:04:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5881f10b-098a-4eb0-b22d-46c5285ca936", "eventTime": "2019-08-11T05:04:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNjgwRnFhQzFrRGhZNU9kalY5bzhqQXRaR3Q3UW1PNVVxRTBFRklkSnFzdC9sYkg1TlNCdVk4L082M2cxQmdOVWNvYVQwWDdnWnJXUzJjNjZwYS9xTHpWZE9lZTdqU2VjejdObHMrMnFhVUFjUVZybmRibEE0Z1lDam9rVEhQTWxDYjR5eTZGNy9BSExFTnF1a1JxWjRvLzlEMnhiRkQ5cC9RZldRNytsSXZNaS8vWmw1SWsxTGJTZnk3OHVHV1BnVGFJMEsya2tIY3pzSktjYXNyL1lIUnVXSW5tc3VzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5881f10b-098a-4eb0-b22d-46c5285ca936", "record_id": "flaws_cloudtrail:0000260:5881f10b-098a-4eb0-b22d-46c5285ca936", "row_index": 260, "timestamp": "2019-08-11T05:04:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5881f10b-098a-4eb0-b22d-46c5285ca936", "eventTime": "2019-08-11T05:04:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNjgwRnFhQzFrRGhZNU9kalY5bzhqQXRaR3Q3UW1PNVVxRTBFRklkSnFzdC9sYkg1TlNCdVk4L082M2cxQmdOVWNvYVQwWDdnWnJXUzJjNjZwYS9xTHpWZE9lZTdqU2VjejdObHMrMnFhVUFjUVZybmRibEE0Z1lDam9rVEhQTWxDYjR5eTZGNy9BSExFTnF1a1JxWjRvLzlEMnhiRkQ5cC9RZldRNytsSXZNaS8vWmw1SWsxTGJTZnk3OHVHV1BnVGFJMEsya2tIY3pzSktjYXNyL1lIUnVXSW5tc3VzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2658e570-26f2-4e09-afa5-47160bcd97", "record_id": "flaws_cloudtrail:0000261:2658e570-26f2-4e09-afa5-47160bcd97", "row_index": 261, "timestamp": "2019-08-11T05:04:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2658e570-26f2-4e09-afa5-47160bcd97", "eventTime": "2019-08-11T05:04:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiR1ZoK1NlSE5pRFhHTnNSdHRReUpMRUFQRWlMSGNTaDlQWFpFMUIyWGdDaE95UVhtTEVvc25FRkx2THk0N2F6NTkxVGhHVlJqUVNGUjVJQnBuV0FjNkIyMHZETHd4TGoyc005S0cxbmxvTTdseWtsb1BFUlNtL3VBaWJaQTFXbWhNTk8ycmJTY0dEUmtWK1BsWnlsNnZoa2pnd2FFMk5Ca3NVNmZad3psL0VxVXdrb3g1S0htYTdCc2tJUnlQa2lEOG9HME90RmVDVTZBR2VkTTZTUERBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2658e570-26f2-4e09-afa5-47160bcd97", "record_id": "flaws_cloudtrail:0000262:2658e570-26f2-4e09-afa5-47160bcd97", "row_index": 262, "timestamp": "2019-08-11T05:04:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2658e570-26f2-4e09-afa5-47160bcd97", "eventTime": "2019-08-11T05:04:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiR1ZoK1NlSE5pRFhHTnNSdHRReUpMRUFQRWlMSGNTaDlQWFpFMUIyWGdDaE95UVhtTEVvc25FRkx2THk0N2F6NTkxVGhHVlJqUVNGUjVJQnBuV0FjNkIyMHZETHd4TGoyc005S0cxbmxvTTdseWtsb1BFUlNtL3VBaWJaQTFXbWhNTk8ycmJTY0dEUmtWK1BsWnlsNnZoa2pnd2FFMk5Ca3NVNmZad3psL0VxVXdrb3g1S0htYTdCc2tJUnlQa2lEOG9HME90RmVDVTZBR2VkTTZTUERBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09901eb-d724-4784-bfb7-dbb1454e28f6", "record_id": "flaws_cloudtrail:0000263:09901eb-d724-4784-bfb7-dbb1454e28f6", "row_index": 263, "timestamp": "2019-08-11T05:04:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09901eb-d724-4784-bfb7-dbb1454e28f6", "eventTime": "2019-08-11T05:04:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4M1hZRWxRcWQzNittSGw4VWJDanhRUmJ0ZTBMUXFKZFhldW9WWXd2WnZxYVRxdDdoZ1RSUVNxb3FDdVFmS3pyMkdseHJkMjhrMyt4KzE3WUR0b0RpQmxxM2N1b3dEVDEzazdCekcrMDh1UDN5UzBaQ0pzeGxmUGswNllGQjZhamJuYjkvZndNRXlYOHlzK2ovYU5lb1NKRjdVVHNpT3RvdzF4NnJOTXltQU9HS1FxSFRadGVxS3hQQi9UcXczWGhIclkvQzAwS0JaN0xPb1RETDRCUGRpaTIrdW9aS3VBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09901eb-d724-4784-bfb7-dbb1454e28f6", "record_id": "flaws_cloudtrail:0000264:09901eb-d724-4784-bfb7-dbb1454e28f6", "row_index": 264, "timestamp": "2019-08-11T05:04:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09901eb-d724-4784-bfb7-dbb1454e28f6", "eventTime": "2019-08-11T05:04:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4M1hZRWxRcWQzNittSGw4VWJDanhRUmJ0ZTBMUXFKZFhldW9WWXd2WnZxYVRxdDdoZ1RSUVNxb3FDdVFmS3pyMkdseHJkMjhrMyt4KzE3WUR0b0RpQmxxM2N1b3dEVDEzazdCekcrMDh1UDN5UzBaQ0pzeGxmUGswNllGQjZhamJuYjkvZndNRXlYOHlzK2ovYU5lb1NKRjdVVHNpT3RvdzF4NnJOTXltQU9HS1FxSFRadGVxS3hQQi9UcXczWGhIclkvQzAwS0JaN0xPb1RETDRCUGRpaTIrdW9aS3VBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c652784-2275-4f67-b7c3-b59c83fbebd1", "record_id": "flaws_cloudtrail:0000265:c652784-2275-4f67-b7c3-b59c83fbebd1", "row_index": 265, "timestamp": "2019-08-11T05:04:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c652784-2275-4f67-b7c3-b59c83fbebd1", "eventTime": "2019-08-11T05:04:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTM1dpSnRlTEpiL3Q3TXJaSkdQRklnVk5WQWd4RFVSd1lMZ0luUkpMa3NtYkVXNkV5b21KSEhWTFJkK3p1aWpVdHRjWHRsNTFzSG5jS1U5YXlQUkZWbzNFelNyZC9RK1ByYlZjcGFhM3ZMN25SYWd3MzJGTUJtczJHWk9KQnRTNkhPK3pUMkc4dzJmSGF3dE1YVHFPTm9DN2xwMEU0VnRmaml3S3dWYnNVNFlpd2VDaHdtNDB5eGxpcUlvdU4wRW0wVkVqd1B3MHFZSTR1b2RvbVYvV2tRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c652784-2275-4f67-b7c3-b59c83fbebd1", "record_id": "flaws_cloudtrail:0000266:c652784-2275-4f67-b7c3-b59c83fbebd1", "row_index": 266, "timestamp": "2019-08-11T05:04:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c652784-2275-4f67-b7c3-b59c83fbebd1", "eventTime": "2019-08-11T05:04:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTM1dpSnRlTEpiL3Q3TXJaSkdQRklnVk5WQWd4RFVSd1lMZ0luUkpMa3NtYkVXNkV5b21KSEhWTFJkK3p1aWpVdHRjWHRsNTFzSG5jS1U5YXlQUkZWbzNFelNyZC9RK1ByYlZjcGFhM3ZMN25SYWd3MzJGTUJtczJHWk9KQnRTNkhPK3pUMkc4dzJmSGF3dE1YVHFPTm9DN2xwMEU0VnRmaml3S3dWYnNVNFlpd2VDaHdtNDB5eGxpcUlvdU4wRW0wVkVqd1B3MHFZSTR1b2RvbVYvV2tRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d3757a7-6b4d-48c9-b0b4-6ddc54cfb3c2", "record_id": "flaws_cloudtrail:0000267:9d3757a7-6b4d-48c9-b0b4-6ddc54cfb3c2", "row_index": 267, "timestamp": "2019-08-11T05:04:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d3757a7-6b4d-48c9-b0b4-6ddc54cfb3c2", "eventTime": "2019-08-11T05:04:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d3757a7-6b4d-48c9-b0b4-6ddc54cfb3c2", "record_id": "flaws_cloudtrail:0000268:9d3757a7-6b4d-48c9-b0b4-6ddc54cfb3c2", "row_index": 268, "timestamp": "2019-08-11T05:04:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d3757a7-6b4d-48c9-b0b4-6ddc54cfb3c2", "eventTime": "2019-08-11T05:04:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547f0996-4f17-4d30-8bcb-6d25a6e0fd49", "record_id": "flaws_cloudtrail:0000269:547f0996-4f17-4d30-8bcb-6d25a6e0fd49", "row_index": 269, "timestamp": "2019-08-11T05:05:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547f0996-4f17-4d30-8bcb-6d25a6e0fd49", "eventTime": "2019-08-11T05:05:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547f0996-4f17-4d30-8bcb-6d25a6e0fd49", "record_id": "flaws_cloudtrail:0000270:547f0996-4f17-4d30-8bcb-6d25a6e0fd49", "row_index": 270, "timestamp": "2019-08-11T05:05:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547f0996-4f17-4d30-8bcb-6d25a6e0fd49", "eventTime": "2019-08-11T05:05:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f63a17b-8b06-4312-b04d-8b0a3e492c8b", "record_id": "flaws_cloudtrail:0000271:4f63a17b-8b06-4312-b04d-8b0a3e492c8b", "row_index": 271, "timestamp": "2019-08-11T05:08:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f63a17b-8b06-4312-b04d-8b0a3e492c8b", "eventTime": "2019-08-11T05:08:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f63a17b-8b06-4312-b04d-8b0a3e492c8b", "record_id": "flaws_cloudtrail:0000272:4f63a17b-8b06-4312-b04d-8b0a3e492c8b", "row_index": 272, "timestamp": "2019-08-11T05:08:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f63a17b-8b06-4312-b04d-8b0a3e492c8b", "eventTime": "2019-08-11T05:08:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d13d2191-77f6-4faa-983b-d6551be14210", "record_id": "flaws_cloudtrail:0000273:d13d2191-77f6-4faa-983b-d6551be14210", "row_index": 273, "timestamp": "2019-08-11T05:11:39Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d13d2191-77f6-4faa-983b-d6551be14210", "eventTime": "2019-08-11T05:11:39Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d13d2191-77f6-4faa-983b-d6551be14210", "record_id": "flaws_cloudtrail:0000274:d13d2191-77f6-4faa-983b-d6551be14210", "row_index": 274, "timestamp": "2019-08-11T05:11:39Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d13d2191-77f6-4faa-983b-d6551be14210", "eventTime": "2019-08-11T05:11:39Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9fe4d5a-9791-4f8f-bb40-9e650f5b2f6d", "record_id": "flaws_cloudtrail:0000275:f9fe4d5a-9791-4f8f-bb40-9e650f5b2f6d", "row_index": 275, "timestamp": "2019-08-11T05:11:54Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9fe4d5a-9791-4f8f-bb40-9e650f5b2f6d", "eventTime": "2019-08-11T05:11:54Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9fe4d5a-9791-4f8f-bb40-9e650f5b2f6d", "record_id": "flaws_cloudtrail:0000276:f9fe4d5a-9791-4f8f-bb40-9e650f5b2f6d", "row_index": 276, "timestamp": "2019-08-11T05:11:54Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9fe4d5a-9791-4f8f-bb40-9e650f5b2f6d", "eventTime": "2019-08-11T05:11:54Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547fd3e7-8fe8-4ce8-abb1-ccb6e79b4b23", "record_id": "flaws_cloudtrail:0000277:547fd3e7-8fe8-4ce8-abb1-ccb6e79b4b23", "row_index": 277, "timestamp": "2019-08-11T05:17:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547fd3e7-8fe8-4ce8-abb1-ccb6e79b4b23", "eventTime": "2019-08-11T05:17:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547fd3e7-8fe8-4ce8-abb1-ccb6e79b4b23", "record_id": "flaws_cloudtrail:0000278:547fd3e7-8fe8-4ce8-abb1-ccb6e79b4b23", "row_index": 278, "timestamp": "2019-08-11T05:17:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547fd3e7-8fe8-4ce8-abb1-ccb6e79b4b23", "eventTime": "2019-08-11T05:17:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "[aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb3f7348-2da3-42c6-84bf-54a7cc066562", "record_id": "flaws_cloudtrail:0000279:fb3f7348-2da3-42c6-84bf-54a7cc066562", "row_index": 279, "timestamp": "2019-08-11T05:17:25Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb3f7348-2da3-42c6-84bf-54a7cc066562", "eventTime": "2019-08-11T05:17:25Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb3f7348-2da3-42c6-84bf-54a7cc066562", "record_id": "flaws_cloudtrail:0000280:fb3f7348-2da3-42c6-84bf-54a7cc066562", "row_index": 280, "timestamp": "2019-08-11T05:17:25Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb3f7348-2da3-42c6-84bf-54a7cc066562", "eventTime": "2019-08-11T05:17:25Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e65a3a1-a2de-444b-85e4-df15550", "record_id": "flaws_cloudtrail:0000281:5e65a3a1-a2de-444b-85e4-df15550", "row_index": 281, "timestamp": "2019-08-11T05:18:55Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e65a3a1-a2de-444b-85e4-df15550", "eventTime": "2019-08-11T05:18:55Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e65a3a1-a2de-444b-85e4-df15550", "record_id": "flaws_cloudtrail:0000282:5e65a3a1-a2de-444b-85e4-df15550", "row_index": 282, "timestamp": "2019-08-11T05:18:55Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e65a3a1-a2de-444b-85e4-df15550", "eventTime": "2019-08-11T05:18:55Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16bde73-6db5-4161-bbe8-f7d541fc1940", "record_id": "flaws_cloudtrail:0000283:f16bde73-6db5-4161-bbe8-f7d541fc1940", "row_index": 283, "timestamp": "2019-08-11T05:29:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16bde73-6db5-4161-bbe8-f7d541fc1940", "eventTime": "2019-08-11T05:29:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16bde73-6db5-4161-bbe8-f7d541fc1940", "record_id": "flaws_cloudtrail:0000284:f16bde73-6db5-4161-bbe8-f7d541fc1940", "row_index": 284, "timestamp": "2019-08-11T05:29:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16bde73-6db5-4161-bbe8-f7d541fc1940", "eventTime": "2019-08-11T05:29:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e9c9cf8-39f0-4ad4-903b-43ae3b75ebe9", "record_id": "flaws_cloudtrail:0000285:1e9c9cf8-39f0-4ad4-903b-43ae3b75ebe9", "row_index": 285, "timestamp": "2019-08-11T05:29:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e9c9cf8-39f0-4ad4-903b-43ae3b75ebe9", "eventTime": "2019-08-11T05:29:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvdEFZeFduSS8vSFphdzJRUUZhUDg3eE5QYlg2TTMwRXloNi9UODl0L3pEWGxyOU5lU3d1enFlUUVDcjhXTWdDNnRvMS9kKzRCTjZNY09hdHlCVU9UY1VOaVJYeFJSdXhuT0dQVVNkZUNGSmlXOXdRWDc2ZEhVT1F6YlJTbDhrM2hSdzFWYmwrWDJHSE51YlBTeEVKbFE1UVcxQkUrdU1kaHU3eWtqdE9lcGwyV05oRTEzK01pL0swRUkvck03SjJ2UUtLemdYNDlmSGp0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e9c9cf8-39f0-4ad4-903b-43ae3b75ebe9", "record_id": "flaws_cloudtrail:0000286:1e9c9cf8-39f0-4ad4-903b-43ae3b75ebe9", "row_index": 286, "timestamp": "2019-08-11T05:29:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e9c9cf8-39f0-4ad4-903b-43ae3b75ebe9", "eventTime": "2019-08-11T05:29:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvdEFZeFduSS8vSFphdzJRUUZhUDg3eE5QYlg2TTMwRXloNi9UODl0L3pEWGxyOU5lU3d1enFlUUVDcjhXTWdDNnRvMS9kKzRCTjZNY09hdHlCVU9UY1VOaVJYeFJSdXhuT0dQVVNkZUNGSmlXOXdRWDc2ZEhVT1F6YlJTbDhrM2hSdzFWYmwrWDJHSE51YlBTeEVKbFE1UVcxQkUrdU1kaHU3eWtqdE9lcGwyV05oRTEzK01pL0swRUkvck03SjJ2UUtLemdYNDlmSGp0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90663ab-5ed4-4831-9cf6-061778b0a5a", "record_id": "flaws_cloudtrail:0000287:90663ab-5ed4-4831-9cf6-061778b0a5a", "row_index": 287, "timestamp": "2019-08-11T05:29:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90663ab-5ed4-4831-9cf6-061778b0a5a", "eventTime": "2019-08-11T05:29:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLOGhvdFlaVFRsdGRjdEJ1R1lYQ0VldVhRbnhCbktwYnUwQndCaktXdXgrTUcvcmdFaWNMTVhXUE8zcUc2bmVuZlZzN0xhMWtTRU5FVzgzb3NwZHQ4Vk0xc2F4S3ZoMytlNmRROTBlYmdWZWo5N0tOVHM0WUtpZE94YjY3RkNFakEwaEN4QStFbmNNcTArVUlIa1J5T091dTQrblRqdW9FWXdMVHlaK0dZZ1RSMzlHSElBYzlFSVNWRmR2L0xRTkE1cTRxcmRBV1ZFST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90663ab-5ed4-4831-9cf6-061778b0a5a", "record_id": "flaws_cloudtrail:0000288:90663ab-5ed4-4831-9cf6-061778b0a5a", "row_index": 288, "timestamp": "2019-08-11T05:29:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90663ab-5ed4-4831-9cf6-061778b0a5a", "eventTime": "2019-08-11T05:29:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLOGhvdFlaVFRsdGRjdEJ1R1lYQ0VldVhRbnhCbktwYnUwQndCaktXdXgrTUcvcmdFaWNMTVhXUE8zcUc2bmVuZlZzN0xhMWtTRU5FVzgzb3NwZHQ4Vk0xc2F4S3ZoMytlNmRROTBlYmdWZWo5N0tOVHM0WUtpZE94YjY3RkNFakEwaEN4QStFbmNNcTArVUlIa1J5T091dTQrblRqdW9FWXdMVHlaK0dZZ1RSMzlHSElBYzlFSVNWRmR2L0xRTkE1cTRxcmRBV1ZFST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb4b32b-3793-4684-a2a0-7fd8b020c877", "record_id": "flaws_cloudtrail:0000289:8cb4b32b-3793-4684-a2a0-7fd8b020c877", "row_index": 289, "timestamp": "2019-08-11T05:29:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb4b32b-3793-4684-a2a0-7fd8b020c877", "eventTime": "2019-08-11T05:29:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiWk5vOGdvT0VxMTd3U3EzbGZPeWJweW1SbFJENUFhalZZVENvazVjNVA3RnJSVTNTTjFDK1RnSUdnOFhzV01jcXcvRVpCUC9MLzh1clpKUVloaDZmWEd4enhYSU1mWG5KQ3psRWNpTmlPdlpIYlYzUVVBdXNIbmhaZ0N0OU53RDR6cllFRVFjZFFQSVhxRE9tNFRtbUc3d2ZsWUFDZDVOaTVXZG5vNTM5RGR2dFp0Z1FKdU9uZkdBZS9EbXBmS2JuN1RPN2ZpbkJEbmpGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb4b32b-3793-4684-a2a0-7fd8b020c877", "record_id": "flaws_cloudtrail:0000290:8cb4b32b-3793-4684-a2a0-7fd8b020c877", "row_index": 290, "timestamp": "2019-08-11T05:29:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb4b32b-3793-4684-a2a0-7fd8b020c877", "eventTime": "2019-08-11T05:29:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiWk5vOGdvT0VxMTd3U3EzbGZPeWJweW1SbFJENUFhalZZVENvazVjNVA3RnJSVTNTTjFDK1RnSUdnOFhzV01jcXcvRVpCUC9MLzh1clpKUVloaDZmWEd4enhYSU1mWG5KQ3psRWNpTmlPdlpIYlYzUVVBdXNIbmhaZ0N0OU53RDR6cllFRVFjZFFQSVhxRE9tNFRtbUc3d2ZsWUFDZDVOaTVXZG5vNTM5RGR2dFp0Z1FKdU9uZkdBZS9EbXBmS2JuN1RPN2ZpbkJEbmpGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94034d2-eeec-4d4f-a1d9-9e39095dc60", "record_id": "flaws_cloudtrail:0000291:e94034d2-eeec-4d4f-a1d9-9e39095dc60", "row_index": 291, "timestamp": "2019-08-11T05:29:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94034d2-eeec-4d4f-a1d9-9e39095dc60", "eventTime": "2019-08-11T05:29:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNRWtva2hSU1h1UTBKZmtrQVFvTSthNktNVFdQSW1ORGtFd0NkWE1EalhHOGRFZXZ5dWFSeEIrajY4Mm5FQVRQOFdFZHlEcG5JWFBhSi9rZ0lkYjVVRGV4Zm5pdTk5OFZqSUlNZVFSUGh6ZU04K0ozdlY0bzhYT0pPSjNFK2pQSE0vYUN2M1A2QjBYQkZVLytzM0VlVGhHWFFIeVQ4QlYreGdFeU1MZFdBRFphNWVOTjNEbHdibDZ0NWwyT2ljWWZROUx4VFU5a3NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94034d2-eeec-4d4f-a1d9-9e39095dc60", "record_id": "flaws_cloudtrail:0000292:e94034d2-eeec-4d4f-a1d9-9e39095dc60", "row_index": 292, "timestamp": "2019-08-11T05:29:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94034d2-eeec-4d4f-a1d9-9e39095dc60", "eventTime": "2019-08-11T05:29:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNRWtva2hSU1h1UTBKZmtrQVFvTSthNktNVFdQSW1ORGtFd0NkWE1EalhHOGRFZXZ5dWFSeEIrajY4Mm5FQVRQOFdFZHlEcG5JWFBhSi9rZ0lkYjVVRGV4Zm5pdTk5OFZqSUlNZVFSUGh6ZU04K0ozdlY0bzhYT0pPSjNFK2pQSE0vYUN2M1A2QjBYQkZVLytzM0VlVGhHWFFIeVQ4QlYreGdFeU1MZFdBRFphNWVOTjNEbHdibDZ0NWwyT2ljWWZROUx4VFU5a3NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6338a446-cad9-48e0-8e4d-e8ac5d4ff354", "record_id": "flaws_cloudtrail:0000293:6338a446-cad9-48e0-8e4d-e8ac5d4ff354", "row_index": 293, "timestamp": "2019-08-11T05:29:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6338a446-cad9-48e0-8e4d-e8ac5d4ff354", "eventTime": "2019-08-11T05:29:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJemw1Y1J3RjJ5MVB1M2hwZ24xRzJmSm5IaDJhdURZSHFIVFBXYXV1NmFmbXllaFAzenVVcmV0SWlZSEUxeFZkbE40Z3ErTUUwZ2ZWcmhiNmUrcDBIVVd5TTdKMFJuaGhxOUtQSFhHRVZKTzhzTDZORnFqc0tpM3c5YVpyc21RVFBMV1dYTVpwZjRabExhYm5IbU5vK0p3c0VLY256Tmtyb3Q2Z1FFZXhjTXYvdHRpUDJJQVFlZDR1NytXNmFaZnFPbkxlaldRWi9qNWRaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6338a446-cad9-48e0-8e4d-e8ac5d4ff354", "record_id": "flaws_cloudtrail:0000294:6338a446-cad9-48e0-8e4d-e8ac5d4ff354", "row_index": 294, "timestamp": "2019-08-11T05:29:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6338a446-cad9-48e0-8e4d-e8ac5d4ff354", "eventTime": "2019-08-11T05:29:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJemw1Y1J3RjJ5MVB1M2hwZ24xRzJmSm5IaDJhdURZSHFIVFBXYXV1NmFmbXllaFAzenVVcmV0SWlZSEUxeFZkbE40Z3ErTUUwZ2ZWcmhiNmUrcDBIVVd5TTdKMFJuaGhxOUtQSFhHRVZKTzhzTDZORnFqc0tpM3c5YVpyc21RVFBMV1dYTVpwZjRabExhYm5IbU5vK0p3c0VLY256Tmtyb3Q2Z1FFZXhjTXYvdHRpUDJJQVFlZDR1NytXNmFaZnFPbkxlaldRWi9qNWRaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25f6408-9495-463c-8411-a6149a209078e", "record_id": "flaws_cloudtrail:0000295:f25f6408-9495-463c-8411-a6149a209078e", "row_index": 295, "timestamp": "2019-08-11T05:29:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25f6408-9495-463c-8411-a6149a209078e", "eventTime": "2019-08-11T05:29:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIMVAxTVZ6YWRWVk1FOG4yMG5WQlZSRUxTckkwb0tlUlVZaG1UdDR3WEl3RFA3S0I2TmxMV2Q3d0htb0hvWWZ4T1BPZ1BKTHNlZjcydzNWcXhDaDdRa2NpZnh5amZqbFlaUCtSMktYYUI0TDlYNDZWR3JtN0N3R21LTzQwZDh0MEpxQVlpOTZrM2NXRG11a3pzR0xsTG0xSnRtaVJiU2FlTWxwZjg2QktHRDhiK0U4ajZTblpnQTU3aVdDUVhVQm11V0cxYVhqNTFKN0ZTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25f6408-9495-463c-8411-a6149a209078e", "record_id": "flaws_cloudtrail:0000296:f25f6408-9495-463c-8411-a6149a209078e", "row_index": 296, "timestamp": "2019-08-11T05:29:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25f6408-9495-463c-8411-a6149a209078e", "eventTime": "2019-08-11T05:29:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIMVAxTVZ6YWRWVk1FOG4yMG5WQlZSRUxTckkwb0tlUlVZaG1UdDR3WEl3RFA3S0I2TmxMV2Q3d0htb0hvWWZ4T1BPZ1BKTHNlZjcydzNWcXhDaDdRa2NpZnh5amZqbFlaUCtSMktYYUI0TDlYNDZWR3JtN0N3R21LTzQwZDh0MEpxQVlpOTZrM2NXRG11a3pzR0xsTG0xSnRtaVJiU2FlTWxwZjg2QktHRDhiK0U4ajZTblpnQTU3aVdDUVhVQm11V0cxYVhqNTFKN0ZTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "074ad502-17f2-4dc7-8c1e-67cf8f8cbb2b", "record_id": "flaws_cloudtrail:0000297:074ad502-17f2-4dc7-8c1e-67cf8f8cbb2b", "row_index": 297, "timestamp": "2019-08-11T05:29:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "074ad502-17f2-4dc7-8c1e-67cf8f8cbb2b", "eventTime": "2019-08-11T05:29:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZG1IdFJwRWRpdk5OeXlldDBQd0djUzU0OGhCVFJFeXBFK1BHOGh0aUVJUmlhZ3BFbkx0L0I1WU1ydmcxS3JRbVVuYjRuaE5iRmJqWXBDYWt2ZU5nU05oNUJGcVF2bWgyQ2grcE5DUTlBbHAvSUpwVXFzdFY0a2w4T0RxNmdLM0h1YW1uaDNYSkJRRzIraGNDOEY4SDZtdkJkL2tENDFISGN0YVVhWDJvWmhUeWwzcFhpYnU0VHpFRkI4SmFURFFIeVMzOVVDQnhvTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "074ad502-17f2-4dc7-8c1e-67cf8f8cbb2b", "record_id": "flaws_cloudtrail:0000298:074ad502-17f2-4dc7-8c1e-67cf8f8cbb2b", "row_index": 298, "timestamp": "2019-08-11T05:29:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "074ad502-17f2-4dc7-8c1e-67cf8f8cbb2b", "eventTime": "2019-08-11T05:29:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZG1IdFJwRWRpdk5OeXlldDBQd0djUzU0OGhCVFJFeXBFK1BHOGh0aUVJUmlhZ3BFbkx0L0I1WU1ydmcxS3JRbVVuYjRuaE5iRmJqWXBDYWt2ZU5nU05oNUJGcVF2bWgyQ2grcE5DUTlBbHAvSUpwVXFzdFY0a2w4T0RxNmdLM0h1YW1uaDNYSkJRRzIraGNDOEY4SDZtdkJkL2tENDFISGN0YVVhWDJvWmhUeWwzcFhpYnU0VHpFRkI4SmFURFFIeVMzOVVDQnhvTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcd8a87-5f0b-44a0-9691-d9a43c02d397", "record_id": "flaws_cloudtrail:0000299:efcd8a87-5f0b-44a0-9691-d9a43c02d397", "row_index": 299, "timestamp": "2019-08-11T05:29:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcd8a87-5f0b-44a0-9691-d9a43c02d397", "eventTime": "2019-08-11T05:29:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5YmdTNEZEenNKbVp2Yjh3dm9iZlovVVB2Z3A5dUpOY3ZGNHIwOEIyWGZwYjlxdHp2alFLdjVWNVdlNEEvMWZKMEgrYXd2QjZaM0VtTGt0MG13cTd3Ni9yVkFrT3Y4SVFWWVJDRzJnVFBrWFhYZHBadU52T0dia3QzMjAwd1BCL3lHUGkyYkg5OE9GSnUyUEtGVEVsaXRsNmhUWStRRzM1SUVjN0JvdllSL3hYaDhnYk92blBzS2NrdmdWVnhyMTlkZnpKVFdLVm1sSWJudz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcd8a87-5f0b-44a0-9691-d9a43c02d397", "record_id": "flaws_cloudtrail:0000300:efcd8a87-5f0b-44a0-9691-d9a43c02d397", "row_index": 300, "timestamp": "2019-08-11T05:29:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcd8a87-5f0b-44a0-9691-d9a43c02d397", "eventTime": "2019-08-11T05:29:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5YmdTNEZEenNKbVp2Yjh3dm9iZlovVVB2Z3A5dUpOY3ZGNHIwOEIyWGZwYjlxdHp2alFLdjVWNVdlNEEvMWZKMEgrYXd2QjZaM0VtTGt0MG13cTd3Ni9yVkFrT3Y4SVFWWVJDRzJnVFBrWFhYZHBadU52T0dia3QzMjAwd1BCL3lHUGkyYkg5OE9GSnUyUEtGVEVsaXRsNmhUWStRRzM1SUVjN0JvdllSL3hYaDhnYk92blBzS2NrdmdWVnhyMTlkZnpKVFdLVm1sSWJudz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e481cfe6-f771-4391-a346-2f640576a7", "record_id": "flaws_cloudtrail:0000301:e481cfe6-f771-4391-a346-2f640576a7", "row_index": 301, "timestamp": "2019-08-11T05:29:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e481cfe6-f771-4391-a346-2f640576a7", "eventTime": "2019-08-11T05:29:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3RnpkMVJFWUg5V3FPd251clBqTSthL2krbWZyRWhSWDFnOG9IUWk5WTcxdk1kQ2NrUVpWcG02QXF0c0VId0l4STU0aUdYUXJlTmpoY2JEMWUyNHFrYzBTSXpueFY2V0JmVlBFN2JLaE16RWdVbGJIdlBQd3FGSm81YzRabU9rQlBCZ1IzWWcwYlVaSTFsWmpLU1VSdHp3UFZYTlZJL0FzSng5bDRrSk5qa09VNmpRL01OUlR5amNLQ0RYMWcvMUc5STZOdXBQYnRIR2Rkdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e481cfe6-f771-4391-a346-2f640576a7", "record_id": "flaws_cloudtrail:0000302:e481cfe6-f771-4391-a346-2f640576a7", "row_index": 302, "timestamp": "2019-08-11T05:29:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e481cfe6-f771-4391-a346-2f640576a7", "eventTime": "2019-08-11T05:29:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3RnpkMVJFWUg5V3FPd251clBqTSthL2krbWZyRWhSWDFnOG9IUWk5WTcxdk1kQ2NrUVpWcG02QXF0c0VId0l4STU0aUdYUXJlTmpoY2JEMWUyNHFrYzBTSXpueFY2V0JmVlBFN2JLaE16RWdVbGJIdlBQd3FGSm81YzRabU9rQlBCZ1IzWWcwYlVaSTFsWmpLU1VSdHp3UFZYTlZJL0FzSng5bDRrSk5qa09VNmpRL01OUlR5amNLQ0RYMWcvMUc5STZOdXBQYnRIR2Rkdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41b0bc0c-4515-4f36-ae8a-bbd72c057c16", "record_id": "flaws_cloudtrail:0000303:41b0bc0c-4515-4f36-ae8a-bbd72c057c16", "row_index": 303, "timestamp": "2019-08-11T05:29:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41b0bc0c-4515-4f36-ae8a-bbd72c057c16", "eventTime": "2019-08-11T05:29:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4TDVsR2QycTFWNkxWUVJ0b3BhTk50ODJDeUFyWDA0czYybUpGQWpvUzdXZkk3NzM5c0VPZ1d6T3ZwMkNRcXJLL3JqMGtDcUJlU2lob25rQlV0bnVwR3lTK3Mxd3dnaVhBRlZacnJobWNnNHdSbUFNZUc2bVNEMThJRmZ4UmI5M0M3SUF2YkZSeTUrMnFETUl4bnphVFlCL3B1Mno5bGdJNFdxYmpzUWgrL3FsZURjUHk0SU5IVFFxd1NCNVdETU1Md0Mybnhqa3BiNzVHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41b0bc0c-4515-4f36-ae8a-bbd72c057c16", "record_id": "flaws_cloudtrail:0000304:41b0bc0c-4515-4f36-ae8a-bbd72c057c16", "row_index": 304, "timestamp": "2019-08-11T05:29:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41b0bc0c-4515-4f36-ae8a-bbd72c057c16", "eventTime": "2019-08-11T05:29:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4TDVsR2QycTFWNkxWUVJ0b3BhTk50ODJDeUFyWDA0czYybUpGQWpvUzdXZkk3NzM5c0VPZ1d6T3ZwMkNRcXJLL3JqMGtDcUJlU2lob25rQlV0bnVwR3lTK3Mxd3dnaVhBRlZacnJobWNnNHdSbUFNZUc2bVNEMThJRmZ4UmI5M0M3SUF2YkZSeTUrMnFETUl4bnphVFlCL3B1Mno5bGdJNFdxYmpzUWgrL3FsZURjUHk0SU5IVFFxd1NCNVdETU1Md0Mybnhqa3BiNzVHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "127a85d4-4ad3-47d1-ab37-04bd7d1c9a41", "record_id": "flaws_cloudtrail:0000305:127a85d4-4ad3-47d1-ab37-04bd7d1c9a41", "row_index": 305, "timestamp": "2019-08-11T05:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "127a85d4-4ad3-47d1-ab37-04bd7d1c9a41", "eventTime": "2019-08-11T05:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUelNMU1BtTE5ESXR1VTlMSFJ0UVN1WCszMkFYS0dtaEt3dzloTHZnS1Vpa0lvSlROUXB0QjA1UUhiL3JWYmd3VXdNS1ZHR01LeWtSdTREWmpxUXNZTEVEWE5hdkpmd2RTUGNhMEdNVDRtYnZudi9MTFVDVytNZkphTCtMZ0hhc0hTMkpORWVGdkJkbkEyRXpsbG1kNnhicWlNL3NYKzNKWHNVVHR0T3RYZDdJK0owcGRVTHJmVTE2dVlkTCt4UlVFem1RbklGWkN1eEg1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "127a85d4-4ad3-47d1-ab37-04bd7d1c9a41", "record_id": "flaws_cloudtrail:0000306:127a85d4-4ad3-47d1-ab37-04bd7d1c9a41", "row_index": 306, "timestamp": "2019-08-11T05:30:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "127a85d4-4ad3-47d1-ab37-04bd7d1c9a41", "eventTime": "2019-08-11T05:30:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUelNMU1BtTE5ESXR1VTlMSFJ0UVN1WCszMkFYS0dtaEt3dzloTHZnS1Vpa0lvSlROUXB0QjA1UUhiL3JWYmd3VXdNS1ZHR01LeWtSdTREWmpxUXNZTEVEWE5hdkpmd2RTUGNhMEdNVDRtYnZudi9MTFVDVytNZkphTCtMZ0hhc0hTMkpORWVGdkJkbkEyRXpsbG1kNnhicWlNL3NYKzNKWHNVVHR0T3RYZDdJK0owcGRVTHJmVTE2dVlkTCt4UlVFem1RbklGWkN1eEg1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9415b80-6418-4912-934e-c0fbdb146b00", "record_id": "flaws_cloudtrail:0000307:f9415b80-6418-4912-934e-c0fbdb146b00", "row_index": 307, "timestamp": "2019-08-11T05:30:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9415b80-6418-4912-934e-c0fbdb146b00", "eventTime": "2019-08-11T05:30:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVbDdwSzBkTHpXVmtmYmlkWlZLbHdwTzl4TlRxQXVoR2M1T1pjazZ0bW1nNXdJN1p1SFhBMTMyODE0U1VLOEZlNnZrUXhUV3FreXdWeHVyLzNlSWZVMjZ0Q1hzWmxBSGtjbmI4SmlCSE9xcVE0RXpMdTk5RXk2bU0rcnlqUlc0a2N6U1ZEeXlDZmpKOWtBZ0d6Nm80T04vOTJ2Nmk5T1R4NVplYXZ6QjNMMzRESkFhVWRBMWZjN2JaSTd3NVFzcExMZHh2WTcvTHlBRFJYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9415b80-6418-4912-934e-c0fbdb146b00", "record_id": "flaws_cloudtrail:0000308:f9415b80-6418-4912-934e-c0fbdb146b00", "row_index": 308, "timestamp": "2019-08-11T05:30:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9415b80-6418-4912-934e-c0fbdb146b00", "eventTime": "2019-08-11T05:30:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVbDdwSzBkTHpXVmtmYmlkWlZLbHdwTzl4TlRxQXVoR2M1T1pjazZ0bW1nNXdJN1p1SFhBMTMyODE0U1VLOEZlNnZrUXhUV3FreXdWeHVyLzNlSWZVMjZ0Q1hzWmxBSGtjbmI4SmlCSE9xcVE0RXpMdTk5RXk2bU0rcnlqUlc0a2N6U1ZEeXlDZmpKOWtBZ0d6Nm80T04vOTJ2Nmk5T1R4NVplYXZ6QjNMMzRESkFhVWRBMWZjN2JaSTd3NVFzcExMZHh2WTcvTHlBRFJYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45f53d98-e292-4e2c-9b23-463684ffd7", "record_id": "flaws_cloudtrail:0000309:45f53d98-e292-4e2c-9b23-463684ffd7", "row_index": 309, "timestamp": "2019-08-11T05:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45f53d98-e292-4e2c-9b23-463684ffd7", "eventTime": "2019-08-11T05:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFZGd4ekdudkxPNE0ycW1EZDVYa25GMnVWMjV2RDNIR3ZSQm1Dc1NYUFFpNCttWFFPVUNHdFZtL0xJNHJSVlpGaXNmTUdlN1NRell1N1hCTHg0djhyaFhGaHZpTmVFVmlHa0ZKWnZyd08xM3N2RThobm5aQ01LOEhpcWZSbDRidWEzc1dta2lLeVFqMnlzQkVSZjhINjBuQ2VPRzBFbmNYZFJURDZieFFNYXU4TE90dmdCSGtYcW9LOVJ2UzVRWk1xb2NQK2FTTHlzQlFadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45f53d98-e292-4e2c-9b23-463684ffd7", "record_id": "flaws_cloudtrail:0000310:45f53d98-e292-4e2c-9b23-463684ffd7", "row_index": 310, "timestamp": "2019-08-11T05:30:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45f53d98-e292-4e2c-9b23-463684ffd7", "eventTime": "2019-08-11T05:30:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFZGd4ekdudkxPNE0ycW1EZDVYa25GMnVWMjV2RDNIR3ZSQm1Dc1NYUFFpNCttWFFPVUNHdFZtL0xJNHJSVlpGaXNmTUdlN1NRell1N1hCTHg0djhyaFhGaHZpTmVFVmlHa0ZKWnZyd08xM3N2RThobm5aQ01LOEhpcWZSbDRidWEzc1dta2lLeVFqMnlzQkVSZjhINjBuQ2VPRzBFbmNYZFJURDZieFFNYXU4TE90dmdCSGtYcW9LOVJ2UzVRWk1xb2NQK2FTTHlzQlFadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27fd6b39-90bc-41bc-90c3-c3ae8871f6cd", "record_id": "flaws_cloudtrail:0000311:27fd6b39-90bc-41bc-90c3-c3ae8871f6cd", "row_index": 311, "timestamp": "2019-08-11T05:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27fd6b39-90bc-41bc-90c3-c3ae8871f6cd", "eventTime": "2019-08-11T05:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxWiswZjV0ZFZyUVByMGcxLzcwN05KUVdxWE1jTFlWMXlxUjc1RHJZY1MvVnh5SHpRQVh1VDV0NUYxQmd6cE1jVWIrN1RScXNzRHRaY0pTZGZrdDRlaHdoRUJjOUdhOEpsZEJDNWZkenQrNVBXNG5vQU82T0ZudWhrbzNYMVlnQjZFM1UvcytrRUFGRlZQU2hCL1lTMjdqbEZ4Y0VPcHB1bmZ3Y1NoUEUwaGVVWm9NMDZFNXAzSWdaV1BjK1lVcE5MdWxsNGc3QjdEdlJtamdpdDBpZk1kWEUzY1BHSHFBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27fd6b39-90bc-41bc-90c3-c3ae8871f6cd", "record_id": "flaws_cloudtrail:0000312:27fd6b39-90bc-41bc-90c3-c3ae8871f6cd", "row_index": 312, "timestamp": "2019-08-11T05:30:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27fd6b39-90bc-41bc-90c3-c3ae8871f6cd", "eventTime": "2019-08-11T05:30:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxWiswZjV0ZFZyUVByMGcxLzcwN05KUVdxWE1jTFlWMXlxUjc1RHJZY1MvVnh5SHpRQVh1VDV0NUYxQmd6cE1jVWIrN1RScXNzRHRaY0pTZGZrdDRlaHdoRUJjOUdhOEpsZEJDNWZkenQrNVBXNG5vQU82T0ZudWhrbzNYMVlnQjZFM1UvcytrRUFGRlZQU2hCL1lTMjdqbEZ4Y0VPcHB1bmZ3Y1NoUEUwaGVVWm9NMDZFNXAzSWdaV1BjK1lVcE5MdWxsNGc3QjdEdlJtamdpdDBpZk1kWEUzY1BHSHFBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26bfeb07-c557-4616-ae81-73906d61fd", "record_id": "flaws_cloudtrail:0000313:26bfeb07-c557-4616-ae81-73906d61fd", "row_index": 313, "timestamp": "2019-08-11T05:30:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26bfeb07-c557-4616-ae81-73906d61fd", "eventTime": "2019-08-11T05:30:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISzZqQlFUY2VLVVlBbXZRMlhUazc2UTNJbEU3ZUllb3lyQlh1N3J3ZjVZT3RZVGF4TGV3S0s0SlcrUFlwaGU3SDc1RjM3Q3VUKzk3aXdRVkR1MWhseTlwb1JBLzVUTk9HeHU2Y29iRXM0VEM3MUZsU0pmeHZCZWtLb0JhL28wRi9xWFBWdjduMnVnaWJEOTBYMW9rMzdZcFVrRzZWeTlxcE9wUkw1SXp1aEE4MzhheDhKdmpWRDZxM09BZTY2WlByelpiMDhGdGcrWFhLaEZCc2ZEbjBRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26bfeb07-c557-4616-ae81-73906d61fd", "record_id": "flaws_cloudtrail:0000314:26bfeb07-c557-4616-ae81-73906d61fd", "row_index": 314, "timestamp": "2019-08-11T05:30:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26bfeb07-c557-4616-ae81-73906d61fd", "eventTime": "2019-08-11T05:30:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJISzZqQlFUY2VLVVlBbXZRMlhUazc2UTNJbEU3ZUllb3lyQlh1N3J3ZjVZT3RZVGF4TGV3S0s0SlcrUFlwaGU3SDc1RjM3Q3VUKzk3aXdRVkR1MWhseTlwb1JBLzVUTk9HeHU2Y29iRXM0VEM3MUZsU0pmeHZCZWtLb0JhL28wRi9xWFBWdjduMnVnaWJEOTBYMW9rMzdZcFVrRzZWeTlxcE9wUkw1SXp1aEE4MzhheDhKdmpWRDZxM09BZTY2WlByelpiMDhGdGcrWFhLaEZCc2ZEbjBRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "711e78d1-0586-4a57-b538-d9dab132eaed", "record_id": "flaws_cloudtrail:0000315:711e78d1-0586-4a57-b538-d9dab132eaed", "row_index": 315, "timestamp": "2019-08-11T05:30:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "711e78d1-0586-4a57-b538-d9dab132eaed", "eventTime": "2019-08-11T05:30:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJud1FqemFJLzd6Y2VhejRMOEhCM3JFSnhYUjczMUJGdmRzSlRrZnNNanhjSjFVOHA5dzA1OTRpaW9RaGc1WVZMYnBBV25MVUM3dlVncndHQmNvenI4NE5mUlh4ZDYzWkU5ZUhKQ3lTUjlSTWY4cE9uSEpZcVBBa2ZzU3BSS0FEVkFtNTBFelQ1TndGRFA4NlY2K1pMWjE0WEt0WkF4SW01YXpzdktzdzF0eFhSK2liSnhHdlR3ZXBKZG9ySzV3KzB4d0thTThqdEIyckd0ZXFSTm9EQXZCdnl3TDJGaXJBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "711e78d1-0586-4a57-b538-d9dab132eaed", "record_id": "flaws_cloudtrail:0000316:711e78d1-0586-4a57-b538-d9dab132eaed", "row_index": 316, "timestamp": "2019-08-11T05:30:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "711e78d1-0586-4a57-b538-d9dab132eaed", "eventTime": "2019-08-11T05:30:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJud1FqemFJLzd6Y2VhejRMOEhCM3JFSnhYUjczMUJGdmRzSlRrZnNNanhjSjFVOHA5dzA1OTRpaW9RaGc1WVZMYnBBV25MVUM3dlVncndHQmNvenI4NE5mUlh4ZDYzWkU5ZUhKQ3lTUjlSTWY4cE9uSEpZcVBBa2ZzU3BSS0FEVkFtNTBFelQ1TndGRFA4NlY2K1pMWjE0WEt0WkF4SW01YXpzdktzdzF0eFhSK2liSnhHdlR3ZXBKZG9ySzV3KzB4d0thTThqdEIyckd0ZXFSTm9EQXZCdnl3TDJGaXJBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "262b58ee-52f7-4d2b-8484-dd3595d9be51", "record_id": "flaws_cloudtrail:0000317:262b58ee-52f7-4d2b-8484-dd3595d9be51", "row_index": 317, "timestamp": "2019-08-11T05:30:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "262b58ee-52f7-4d2b-8484-dd3595d9be51", "eventTime": "2019-08-11T05:30:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFUk1KbnlkTUh2eXBvak5jbXdONFAvbmVwT2JFQnZSU1hjY3podlV4Mk9HNzdDc1ZNL2sxQXF1Z0tYZWZ2OU9YVG5Ndktzd2lnTHZZejFzWm51RmRKY0w1T2dscmRnLy9ZNC9FVTRONW5PWTNDNHloVjNaY0g4MzB3eXNQalpJVUwyZE1tdS9SN2xEc01EenpXMUR1L0xrSGg0d1RsWmxoM0s5UWVQRjY2bHV4RnZOOTlENTNEZ3pxdTNFR29lOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "262b58ee-52f7-4d2b-8484-dd3595d9be51", "record_id": "flaws_cloudtrail:0000318:262b58ee-52f7-4d2b-8484-dd3595d9be51", "row_index": 318, "timestamp": "2019-08-11T05:30:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "262b58ee-52f7-4d2b-8484-dd3595d9be51", "eventTime": "2019-08-11T05:30:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFUk1KbnlkTUh2eXBvak5jbXdONFAvbmVwT2JFQnZSU1hjY3podlV4Mk9HNzdDc1ZNL2sxQXF1Z0tYZWZ2OU9YVG5Ndktzd2lnTHZZejFzWm51RmRKY0w1T2dscmRnLy9ZNC9FVTRONW5PWTNDNHloVjNaY0g4MzB3eXNQalpJVUwyZE1tdS9SN2xEc01EenpXMUR1L0xrSGg0d1RsWmxoM0s5UWVQRjY2bHV4RnZOOTlENTNEZ3pxdTNFR29lOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04c6f13-c3a7-497f-be8a-0a19ef39e84d", "record_id": "flaws_cloudtrail:0000319:a04c6f13-c3a7-497f-be8a-0a19ef39e84d", "row_index": 319, "timestamp": "2019-08-11T05:30:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04c6f13-c3a7-497f-be8a-0a19ef39e84d", "eventTime": "2019-08-11T05:30:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4VUZzc0FrZHJYZFlCWTZoTGNNeUcwUzR6ZGRMYlRvTzJZVHhvMWF2eWswUnNsb3plLzdhdWtIWEhjUWZUVEpIRzdHQXoxQXdRTXFLaU05VjNhbVFzdjNCWWJXcFM1RFM0dlhYcXNrRjhqUWl5ZE9VMzN0NFZmMHdORlR0R0czak1VbWcxUXpEU0ljSEdSUU1qaGpDRmlpV3FPcXN6M2FaVEJCWjI4NkJNYWF2UmdLK05zejUzK2tNRVRmaFgwdzVadThIeUxXNjlVVE5VTE5sSTBKaW5iUG1DWVBrNmpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04c6f13-c3a7-497f-be8a-0a19ef39e84d", "record_id": "flaws_cloudtrail:0000320:a04c6f13-c3a7-497f-be8a-0a19ef39e84d", "row_index": 320, "timestamp": "2019-08-11T05:30:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04c6f13-c3a7-497f-be8a-0a19ef39e84d", "eventTime": "2019-08-11T05:30:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4VUZzc0FrZHJYZFlCWTZoTGNNeUcwUzR6ZGRMYlRvTzJZVHhvMWF2eWswUnNsb3plLzdhdWtIWEhjUWZUVEpIRzdHQXoxQXdRTXFLaU05VjNhbVFzdjNCWWJXcFM1RFM0dlhYcXNrRjhqUWl5ZE9VMzN0NFZmMHdORlR0R0czak1VbWcxUXpEU0ljSEdSUU1qaGpDRmlpV3FPcXN6M2FaVEJCWjI4NkJNYWF2UmdLK05zejUzK2tNRVRmaFgwdzVadThIeUxXNjlVVE5VTE5sSTBKaW5iUG1DWVBrNmpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88792ea-f7bf-439c-920e-1f2f537059d5", "record_id": "flaws_cloudtrail:0000321:88792ea-f7bf-439c-920e-1f2f537059d5", "row_index": 321, "timestamp": "2019-08-11T05:30:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88792ea-f7bf-439c-920e-1f2f537059d5", "eventTime": "2019-08-11T05:30:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMG8yb1Q3dVJpNTlsZFMzTlFtSjZycmJGakx3bndGNVpmMmpxVmRGanRpM3Jac0FtbGlPOFJvK1dGNkxXelE0bXNYc0Ixd1p2SU5EY3FKU0NXQnh2UW1ockRpa011R3BydnpmUmJpQnpjZkhVUW1MellpRjdRelZNanJjaWVueHQxajJGQ09zK0REMGRKWnhtWGZpUDBNL1dsRkxrOFEyTmJOcjQzN1RzSXJuM1RDN2REeVJOYW81b01ZSGtqV0Y2R1BwdzJwd3o3bGxydEF4OHVJTmxnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88792ea-f7bf-439c-920e-1f2f537059d5", "record_id": "flaws_cloudtrail:0000322:88792ea-f7bf-439c-920e-1f2f537059d5", "row_index": 322, "timestamp": "2019-08-11T05:30:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88792ea-f7bf-439c-920e-1f2f537059d5", "eventTime": "2019-08-11T05:30:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMG8yb1Q3dVJpNTlsZFMzTlFtSjZycmJGakx3bndGNVpmMmpxVmRGanRpM3Jac0FtbGlPOFJvK1dGNkxXelE0bXNYc0Ixd1p2SU5EY3FKU0NXQnh2UW1ockRpa011R3BydnpmUmJpQnpjZkhVUW1MellpRjdRelZNanJjaWVueHQxajJGQ09zK0REMGRKWnhtWGZpUDBNL1dsRkxrOFEyTmJOcjQzN1RzSXJuM1RDN2REeVJOYW81b01ZSGtqV0Y2R1BwdzJwd3o3bGxydEF4OHVJTmxnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "125212eea-72c6-470a-bba0-5d28f22d2886", "record_id": "flaws_cloudtrail:0000323:125212eea-72c6-470a-bba0-5d28f22d2886", "row_index": 323, "timestamp": "2019-08-11T05:30:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "125212eea-72c6-470a-bba0-5d28f22d2886", "eventTime": "2019-08-11T05:30:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGVldSTU9Qdk9Ha1YzMk1xMUlqTGZLWUJPWmo0M0dHOEsrUC9kekVrUXozRGdTcjB0by96ajRxMnBRWThqNmg3OTkxRG1DWUY1N1RHRzdDeFlVY1VaSGhFRzBmT2c1QWp5dmxpMzc4QmxqTU81UEZCcFRDdnRGcVpxc0g2T3Z6dXRJaHBzS2JCNjdCdDlkdkJyc1J1M2FUdVp4b0Y4aTVLQU8wOCtqNTN3dnFFYXRtRmU0VlVxUTJpSFMwTlQzaWFVSmVmcDlaWjVCdytlNEkvKzJxVVpDRjY5VGhtdHE0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "125212eea-72c6-470a-bba0-5d28f22d2886", "record_id": "flaws_cloudtrail:0000324:125212eea-72c6-470a-bba0-5d28f22d2886", "row_index": 324, "timestamp": "2019-08-11T05:30:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "125212eea-72c6-470a-bba0-5d28f22d2886", "eventTime": "2019-08-11T05:30:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGVldSTU9Qdk9Ha1YzMk1xMUlqTGZLWUJPWmo0M0dHOEsrUC9kekVrUXozRGdTcjB0by96ajRxMnBRWThqNmg3OTkxRG1DWUY1N1RHRzdDeFlVY1VaSGhFRzBmT2c1QWp5dmxpMzc4QmxqTU81UEZCcFRDdnRGcVpxc0g2T3Z6dXRJaHBzS2JCNjdCdDlkdkJyc1J1M2FUdVp4b0Y4aTVLQU8wOCtqNTN3dnFFYXRtRmU0VlVxUTJpSFMwTlQzaWFVSmVmcDlaWjVCdytlNEkvKzJxVVpDRjY5VGhtdHE0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65bf853f-adfa-4bee-abef-a5318a3778d6", "record_id": "flaws_cloudtrail:0000325:65bf853f-adfa-4bee-abef-a5318a3778d6", "row_index": 325, "timestamp": "2019-08-11T05:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65bf853f-adfa-4bee-abef-a5318a3778d6", "eventTime": "2019-08-11T05:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP3T07WYA3BGH66YP", "expiration": "Aug 11, 2019 11:32:31 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65bf853f-adfa-4bee-abef-a5318a3778d6", "record_id": "flaws_cloudtrail:0000326:65bf853f-adfa-4bee-abef-a5318a3778d6", "row_index": 326, "timestamp": "2019-08-11T05:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65bf853f-adfa-4bee-abef-a5318a3778d6", "eventTime": "2019-08-11T05:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP3T07WYA3BGH66YP", "expiration": "Aug 11, 2019 11:32:31 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba06002f-a30f-4ef8-a560-251cf33d5dd5", "record_id": "flaws_cloudtrail:0000327:ba06002f-a30f-4ef8-a560-251cf33d5dd5", "row_index": 327, "timestamp": "2019-08-11T05:57:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba06002f-a30f-4ef8-a560-251cf33d5dd5", "eventTime": "2019-08-11T05:57:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba06002f-a30f-4ef8-a560-251cf33d5dd5", "record_id": "flaws_cloudtrail:0000328:ba06002f-a30f-4ef8-a560-251cf33d5dd5", "row_index": 328, "timestamp": "2019-08-11T05:57:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba06002f-a30f-4ef8-a560-251cf33d5dd5", "eventTime": "2019-08-11T05:57:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1df4b805-72e4-4e8a-891b-71d0dd34b591", "record_id": "flaws_cloudtrail:0000329:1df4b805-72e4-4e8a-891b-71d0dd34b591", "row_index": 329, "timestamp": "2019-08-11T05:58:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1df4b805-72e4-4e8a-891b-71d0dd34b591", "eventTime": "2019-08-11T05:58:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1df4b805-72e4-4e8a-891b-71d0dd34b591", "record_id": "flaws_cloudtrail:0000330:1df4b805-72e4-4e8a-891b-71d0dd34b591", "row_index": 330, "timestamp": "2019-08-11T05:58:05Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1df4b805-72e4-4e8a-891b-71d0dd34b591", "eventTime": "2019-08-11T05:58:05Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87ea86c-fda8-46a9-933f-2330c0c06c5a", "record_id": "flaws_cloudtrail:0000331:c87ea86c-fda8-46a9-933f-2330c0c06c5a", "row_index": 331, "timestamp": "2019-08-11T05:59:21Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87ea86c-fda8-46a9-933f-2330c0c06c5a", "eventTime": "2019-08-11T05:59:21Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87ea86c-fda8-46a9-933f-2330c0c06c5a", "record_id": "flaws_cloudtrail:0000332:c87ea86c-fda8-46a9-933f-2330c0c06c5a", "row_index": 332, "timestamp": "2019-08-11T05:59:21Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87ea86c-fda8-46a9-933f-2330c0c06c5a", "eventTime": "2019-08-11T05:59:21Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee7adde9-555a-4f5d-9457-51b8c41b9c48", "record_id": "flaws_cloudtrail:0000333:ee7adde9-555a-4f5d-9457-51b8c41b9c48", "row_index": 333, "timestamp": "2019-08-11T06:00:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee7adde9-555a-4f5d-9457-51b8c41b9c48", "eventTime": "2019-08-11T06:00:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee7adde9-555a-4f5d-9457-51b8c41b9c48", "record_id": "flaws_cloudtrail:0000334:ee7adde9-555a-4f5d-9457-51b8c41b9c48", "row_index": 334, "timestamp": "2019-08-11T06:00:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee7adde9-555a-4f5d-9457-51b8c41b9c48", "eventTime": "2019-08-11T06:00:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3361df61-1298-4494-a94e-bfc454a9207a", "record_id": "flaws_cloudtrail:0000335:3361df61-1298-4494-a94e-bfc454a9207a", "row_index": 335, "timestamp": "2019-08-11T06:00:40Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3361df61-1298-4494-a94e-bfc454a9207a", "eventTime": "2019-08-11T06:00:40Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3361df61-1298-4494-a94e-bfc454a9207a", "record_id": "flaws_cloudtrail:0000336:3361df61-1298-4494-a94e-bfc454a9207a", "row_index": 336, "timestamp": "2019-08-11T06:00:40Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3361df61-1298-4494-a94e-bfc454a9207a", "eventTime": "2019-08-11T06:00:40Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b6d368-004c-4ca0-afe3-51b70c22df9f", "record_id": "flaws_cloudtrail:0000337:30b6d368-004c-4ca0-afe3-51b70c22df9f", "row_index": 337, "timestamp": "2019-08-11T06:01:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b6d368-004c-4ca0-afe3-51b70c22df9f", "eventTime": "2019-08-11T06:01:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b6d368-004c-4ca0-afe3-51b70c22df9f", "record_id": "flaws_cloudtrail:0000338:30b6d368-004c-4ca0-afe3-51b70c22df9f", "row_index": 338, "timestamp": "2019-08-11T06:01:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b6d368-004c-4ca0-afe3-51b70c22df9f", "eventTime": "2019-08-11T06:01:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c13f1e3e-8f43-4758-8aa1-263496ed4", "record_id": "flaws_cloudtrail:0000339:c13f1e3e-8f43-4758-8aa1-263496ed4", "row_index": 339, "timestamp": "2019-08-11T06:02:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c13f1e3e-8f43-4758-8aa1-263496ed4", "eventTime": "2019-08-11T06:02:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c13f1e3e-8f43-4758-8aa1-263496ed4", "record_id": "flaws_cloudtrail:0000340:c13f1e3e-8f43-4758-8aa1-263496ed4", "row_index": 340, "timestamp": "2019-08-11T06:02:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c13f1e3e-8f43-4758-8aa1-263496ed4", "eventTime": "2019-08-11T06:02:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebe3ef90-3950-4506-bcea-d1e4650116a3", "record_id": "flaws_cloudtrail:0000341:ebe3ef90-3950-4506-bcea-d1e4650116a3", "row_index": 341, "timestamp": "2019-08-11T06:03:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebe3ef90-3950-4506-bcea-d1e4650116a3", "eventTime": "2019-08-11T06:03:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5VJT0X18IP4KE8VE", "expiration": "Aug 11, 2019 6:03:25 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feddd2dd-2a7e-4ce3-a345-f36c41c1b46b", "record_id": "flaws_cloudtrail:0000342:feddd2dd-2a7e-4ce3-a345-f36c41c1b46b", "row_index": 342, "timestamp": "2019-08-11T06:03:25Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA7UUO12M9P8YJX05G", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "105.250.47.235", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feddd2dd-2a7e-4ce3-a345-f36c41c1b46b", "eventTime": "2019-08-11T06:03:25Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.250.47.235", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7UUO12M9P8YJX05G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T06:03:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/11/[$LATEST]ec2c23bf51115bf9b041aabaea1e93d5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26a010906-bf96-4953-83f7-170e73433dc0", "record_id": "flaws_cloudtrail:0000343:26a010906-bf96-4953-83f7-170e73433dc0", "row_index": 343, "timestamp": "2019-08-11T06:03:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26a010906-bf96-4953-83f7-170e73433dc0", "eventTime": "2019-08-11T06:03:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7UUO12M9P8YJX05G", "expiration": "Aug 11, 2019 6:03:25 PM", "sessionToken": "AgoJb3JpZ2luX2VjEC4aCXVzLXdlc3QtMiJIMEYCIQCL+VhGrng1z6fLn4reej14ehcwnnw1QSbbPtST1DxfjwIhAKbET2oCzNtEyYOyIBPK82oMHfR8bRsl4g0FuJQjqw+UKosCCLf//////////wEQABoMOTc1NDI2MjYyMDI5IgwcVMEa33Dm0gOHzAUq3wFxEgaL5NwFyXl0JslHpLhJQ1rIZAoTDEFhGDfuhpddwI5R7ypuX+TcKHJmBm47o8IeUBSK17IDu++9BSJ5XlZnqJtoXNU31akNqw1rh4Wdfi15qzdNVsgTVN8QtGXdbSOOUzvi95GS1iroW2SVs3XaGtlVZDnssA63iROCWZ1CtUIzAOR9CGKYB2qDP7CtBlJ3fCkBe883b+V4nOOGtG2/ga/LbeEEAJs73nVupNlg/LPTEIMhUy0p8e0EDAEjoZ10viGOv8vTPMhfEghGEA5ewJYuEzVYPLTvYI9OGkoNMK3fvuoFOrMBi+CWikVXI68AApNbLWb9mHQCyIwGl44LkbplpBEeNBM/SeU70ne70k3tSRRO7CL6fodSFgoQqtc0e9FyTJ6DBnCFAVHQGlThMEOxGAdJiG8xEiVGNOEYzaOGk72cq8Uhg/8A4w3hHYljYlwWe6k7nIfuFBvxmguo//NW2IQZMrXd9zjl68ay1j51/KFKBZO6CQFI+6Uq3nZyyNsBrMAnmqJsVogUJfwcXNrUlr5Sf2IPMwE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebe3ef90-3950-4506-bcea-d1e4650116a3", "record_id": "flaws_cloudtrail:0000344:ebe3ef90-3950-4506-bcea-d1e4650116a3", "row_index": 344, "timestamp": "2019-08-11T06:03:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebe3ef90-3950-4506-bcea-d1e4650116a3", "eventTime": "2019-08-11T06:03:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5VJT0X18IP4KE8VE", "expiration": "Aug 11, 2019 6:03:25 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feddd2dd-2a7e-4ce3-a345-f36c41c1b46b", "record_id": "flaws_cloudtrail:0000345:feddd2dd-2a7e-4ce3-a345-f36c41c1b46b", "row_index": 345, "timestamp": "2019-08-11T06:03:25Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA7UUO12M9P8YJX05G", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "105.250.47.235", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feddd2dd-2a7e-4ce3-a345-f36c41c1b46b", "eventTime": "2019-08-11T06:03:25Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.250.47.235", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7UUO12M9P8YJX05G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T06:03:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/11/[$LATEST]ec2c23bf51115bf9b041aabaea1e93d5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26a010906-bf96-4953-83f7-170e73433dc0", "record_id": "flaws_cloudtrail:0000346:26a010906-bf96-4953-83f7-170e73433dc0", "row_index": 346, "timestamp": "2019-08-11T06:03:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26a010906-bf96-4953-83f7-170e73433dc0", "eventTime": "2019-08-11T06:03:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7UUO12M9P8YJX05G", "expiration": "Aug 11, 2019 6:03:25 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bedb878-fc87-417a-bae8-48e2c90e5a53", "record_id": "flaws_cloudtrail:0000347:8bedb878-fc87-417a-bae8-48e2c90e5a53", "row_index": 347, "timestamp": "2019-08-11T06:05:30Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bedb878-fc87-417a-bae8-48e2c90e5a53", "eventTime": "2019-08-11T06:05:30Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bedb878-fc87-417a-bae8-48e2c90e5a53", "record_id": "flaws_cloudtrail:0000348:8bedb878-fc87-417a-bae8-48e2c90e5a53", "row_index": 348, "timestamp": "2019-08-11T06:05:30Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bedb878-fc87-417a-bae8-48e2c90e5a53", "eventTime": "2019-08-11T06:05:30Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfd7ae21-5b7a-4b14-9589-797402e767306", "record_id": "flaws_cloudtrail:0000349:cfd7ae21-5b7a-4b14-9589-797402e767306", "row_index": 349, "timestamp": "2019-08-11T06:06:30Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfd7ae21-5b7a-4b14-9589-797402e767306", "eventTime": "2019-08-11T06:06:30Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfd7ae21-5b7a-4b14-9589-797402e767306", "record_id": "flaws_cloudtrail:0000350:cfd7ae21-5b7a-4b14-9589-797402e767306", "row_index": 350, "timestamp": "2019-08-11T06:06:30Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfd7ae21-5b7a-4b14-9589-797402e767306", "eventTime": "2019-08-11T06:06:30Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b84a0484-b457-43db-8761-d67ee945dc8a", "record_id": "flaws_cloudtrail:0000351:b84a0484-b457-43db-8761-d67ee945dc8a", "row_index": 351, "timestamp": "2019-08-11T06:21:14Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b84a0484-b457-43db-8761-d67ee945dc8a", "eventTime": "2019-08-11T06:21:14Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b84a0484-b457-43db-8761-d67ee945dc8a", "record_id": "flaws_cloudtrail:0000352:b84a0484-b457-43db-8761-d67ee945dc8a", "row_index": 352, "timestamp": "2019-08-11T06:21:14Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b84a0484-b457-43db-8761-d67ee945dc8a", "eventTime": "2019-08-11T06:21:14Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a8496f-c684-46d4-aaac-10061473e768", "record_id": "flaws_cloudtrail:0000353:d4a8496f-c684-46d4-aaac-10061473e768", "row_index": 353, "timestamp": "2019-08-11T06:22:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a8496f-c684-46d4-aaac-10061473e768", "eventTime": "2019-08-11T06:22:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUJHQ1KGB2V4DAM8O", "expiration": "Aug 11, 2019 6:22:43 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08810-76c7-4e7a-9895-8bbf0ae790a8", "record_id": "flaws_cloudtrail:0000354:d08810-76c7-4e7a-9895-8bbf0ae790a8", "row_index": 354, "timestamp": "2019-08-11T06:22:43Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA7UUO12M9P8YJX05G", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "184.3.80.8", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08810-76c7-4e7a-9895-8bbf0ae790a8", "eventTime": "2019-08-11T06:22:43Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "184.3.80.8", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7UUO12M9P8YJX05G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T06:03:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/11/[$LATEST]f1332abd7d6714aa1494374dc8a22324"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a8496f-c684-46d4-aaac-10061473e768", "record_id": "flaws_cloudtrail:0000355:d4a8496f-c684-46d4-aaac-10061473e768", "row_index": 355, "timestamp": "2019-08-11T06:22:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a8496f-c684-46d4-aaac-10061473e768", "eventTime": "2019-08-11T06:22:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUJHQ1KGB2V4DAM8O", "expiration": "Aug 11, 2019 6:22:43 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08810-76c7-4e7a-9895-8bbf0ae790a8", "record_id": "flaws_cloudtrail:0000356:d08810-76c7-4e7a-9895-8bbf0ae790a8", "row_index": 356, "timestamp": "2019-08-11T06:22:43Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA7UUO12M9P8YJX05G", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "184.3.80.8", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08810-76c7-4e7a-9895-8bbf0ae790a8", "eventTime": "2019-08-11T06:22:43Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "184.3.80.8", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA7UUO12M9P8YJX05G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T06:03:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/11/[$LATEST]f1332abd7d6714aa1494374dc8a22324"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767c73b0-52c6-43e3-b8e5-05de5f30faca", "record_id": "flaws_cloudtrail:0000357:767c73b0-52c6-43e3-b8e5-05de5f30faca", "row_index": 357, "timestamp": "2019-08-11T06:26:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767c73b0-52c6-43e3-b8e5-05de5f30faca", "eventTime": "2019-08-11T06:26:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAJ9CFDBK8TBOL3JP", "expiration": "Aug 11, 2019 7:26:06 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767c73b0-52c6-43e3-b8e5-05de5f30faca", "record_id": "flaws_cloudtrail:0000358:767c73b0-52c6-43e3-b8e5-05de5f30faca", "row_index": 358, "timestamp": "2019-08-11T06:26:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767c73b0-52c6-43e3-b8e5-05de5f30faca", "eventTime": "2019-08-11T06:26:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAJ9CFDBK8TBOL3JP", "expiration": "Aug 11, 2019 7:26:06 AM", "sessionToken": "AgoJb3JpZ2luX2VjEC8aCXVzLXdlc3QtMiJGMEQCICmYXIvIMJjcxVgromD85ott1ELBWxLKN6L31cdyDwjyAiA9Ap+s7tcpIhYO+59guBldXdrrZCwUoA8ZTWhWVV2ATirxAgi4//////////8BEAAaDDk3NTQyNjI2MjAyOSIMVo5PRuwC8ApRjO5lKsUCWD1KsfLHHo1f6zS3ke7T9Hn9044DvANY2CZr14SjCmrcPgY3T5NlT0RGzlN0okNZGoFEXTNe2r+nIWiKVytPmKgKxAQCkY+VmX/xWQ32WknV0LboRE7dhlLR5qQBsZTV8kXP3lWNNiRsjutOKqrcL+wYqs0ij3LOlpUXZiQ5Nvbrmita/MnBNThwtwn2vHvPGXhjqGP40xORRTc34gonV9nNlwGF+L8ZwDViIdZIqXYV0f9PhKMVX872/6eFmYJP/opS/B0ed9xOjXb2xpZStl14MH6wQnhmJXBZma1kPwiqYxfUUlEIyAuj7+M6tztcQ7Tc2R7J1NQTomw+Eb6kK3GoRpJyacnO8X7msQuHJAVHiBeYG8K9jSKkFgir9iircONAn5VqQ7C+eVWx0SQEwjB1GLYOsKx7BXAMf16Jmbus4gO6oTD+6b7qBTq1AdEnAdwbh1RMFWZEKsFr2x3EkULsc8RBy9miwElG9INYFy3MGVzBTMUI2bx0adFijZ/Fr3hA4SiYXo9dDDKJpnhscEZWp0OVKUDTz3icIOWcUg6qv5FEJ11Ue0Kl2YuwTYFclE3fkvKuKOjjhbDQuP32UqWw1fptZU1+guU7/d78nYPq4hej3Rm1brpy9yOMQTRzUcEg2quCQ3TRubeDITmUarcaXf3lNmrsmGyKa5t2EYHhQcc="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfd5a22-5065-4fe9-8c3e-2747a88032b0", "record_id": "flaws_cloudtrail:0000359:7bfd5a22-5065-4fe9-8c3e-2747a88032b0", "row_index": 359, "timestamp": "2019-08-11T06:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfd5a22-5065-4fe9-8c3e-2747a88032b0", "eventTime": "2019-08-11T06:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPFWKOEFDJ1FXM0B8", "expiration": "Aug 11, 2019 12:52:48 PM", "sessionToken": "AgoJb3JpZ2luX2VjEC8aCXVzLXdlc3QtMiJGMEQCIEGgY7scL161QYXZ12paNv8Olb4kBXUD9fiEqcFqqjNxAiA2XnAxX4ZhU5gkj6ee2p0V5U7ELu0ZBFf69k03EMdD6CrjAwi4//////////8BEAAaDDk3NTQyNjI2MjAyOSIM3ZIEjAOVvDyBtRzDKrcDluZKHrGxPCwEn0fNGDYXelPnBw5Z4zidNSPxG6DdQ9NP5tI3iFcEDbX8D5oAWTiR96nhpq2dRCgOqEJkjn5amWITu4vxYkFzEl4gHhDbJaarEmssAPWGAtjFGqAPLM78iwsWPAbcEoNaR8lPOEe7/KXKxdc/pllXKc05Bf/d5WJXf4GBdsjVYfzq4X/ETWYCQcvkXTOyRMe+g75OjB2eVf2WMtbRr7sORK9OnuHkXdQbI7H4FjuWsmeKXooQF7Jx0wd1Y6a9r5oSHH/U/F/ZFeOe3Ft5YGAkNXSfQ9CApOkwHKZP2kQCy7WOq4QM9la8hyPPfSx9WF9rU43UNA0FIGc3SU/V7US3a1Nf1hlxulMwNdrIU1a3jdBiCAKgz33bbw4KfmjH06uyTWks3R7QKjey39Ee9HEUCWI7ol5niusmK+S982APbA4eqMww35y5Y85R5996Dzc8SGtG5b6LYm1Z9WD2qsZKGPNNFcJ1i1UyhN9aNY4JQj14SsjB+Cz4QlFo/GL857dsdbuiGRacSg6O3NzjDV0xN6XiCF3+HJOFN5wHG4dZ8/LDivaUFCZ1yDIKY6mYjTDc7L7qBTq1Adn/0kAyC6SdeL8TfaghArLpzFKaAda59A2ZByCbIYGh8vr9NfRVqvkKfSjJ3nXhmjk13WtQ4KtSkgxMB3uIktdbY3KRCEWiaYqjuAaui6lTgVrnbYTiNdEm3u72lNnpw81Ery+XkIQwsgjBvYItKWuyHNIL1iU0uLNnHMZ+rOjfX7xdCOzv3mIjlE9Akqxb7+lAioJICIN5qFSMjpcy71kzBRtzcanbNUIbPxtJt83dwLoAzMc="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfd5a22-5065-4fe9-8c3e-2747a88032b0", "record_id": "flaws_cloudtrail:0000360:7bfd5a22-5065-4fe9-8c3e-2747a88032b0", "row_index": 360, "timestamp": "2019-08-11T06:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfd5a22-5065-4fe9-8c3e-2747a88032b0", "eventTime": "2019-08-11T06:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPFWKOEFDJ1FXM0B8", "expiration": "Aug 11, 2019 12:52:48 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76df04a5-94dc-445d-b676-be4b82b49074", "record_id": "flaws_cloudtrail:0000361:76df04a5-94dc-445d-b676-be4b82b49074", "row_index": 361, "timestamp": "2019-08-11T06:32:23Z", "event_type": "CreateInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76df04a5-94dc-445d-b676-be4b82b49074", "eventTime": "2019-08-11T06:32:23Z", "eventName": "CreateInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: lightsail:CreateInstances on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76df04a5-94dc-445d-b676-be4b82b49074", "record_id": "flaws_cloudtrail:0000362:76df04a5-94dc-445d-b676-be4b82b49074", "row_index": 362, "timestamp": "2019-08-11T06:32:23Z", "event_type": "CreateInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76df04a5-94dc-445d-b676-be4b82b49074", "eventTime": "2019-08-11T06:32:23Z", "eventName": "CreateInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: lightsail:CreateInstances on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03d1412b-582f-47e1-8ec3-88ae1bdae287", "record_id": "flaws_cloudtrail:0000363:03d1412b-582f-47e1-8ec3-88ae1bdae287", "row_index": 363, "timestamp": "2019-08-11T06:32:53Z", "event_type": "CreateInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03d1412b-582f-47e1-8ec3-88ae1bdae287", "eventTime": "2019-08-11T06:32:53Z", "eventName": "CreateInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: lightsail:CreateInstances on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03d1412b-582f-47e1-8ec3-88ae1bdae287", "record_id": "flaws_cloudtrail:0000364:03d1412b-582f-47e1-8ec3-88ae1bdae287", "row_index": 364, "timestamp": "2019-08-11T06:32:53Z", "event_type": "CreateInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA01KBH13SQNDN5N5M", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03d1412b-582f-47e1-8ec3-88ae1bdae287", "eventTime": "2019-08-11T06:32:53Z", "eventName": "CreateInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: lightsail:CreateInstances on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA01KBH13SQNDN5N5M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T04:31:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ac6f79e-b01b-4ecd-a216-0bbeb544ecb1", "record_id": "flaws_cloudtrail:0000365:0ac6f79e-b01b-4ecd-a216-0bbeb544ecb1", "row_index": 365, "timestamp": "2019-08-11T07:09:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ac6f79e-b01b-4ecd-a216-0bbeb544ecb1", "eventTime": "2019-08-11T07:09:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ac6f79e-b01b-4ecd-a216-0bbeb544ecb1", "record_id": "flaws_cloudtrail:0000366:0ac6f79e-b01b-4ecd-a216-0bbeb544ecb1", "row_index": 366, "timestamp": "2019-08-11T07:09:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ac6f79e-b01b-4ecd-a216-0bbeb544ecb1", "eventTime": "2019-08-11T07:09:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeabfec9-9d20-4e9f-b040-99be3a7b7192", "record_id": "flaws_cloudtrail:0000367:aeabfec9-9d20-4e9f-b040-99be3a7b7192", "row_index": 367, "timestamp": "2019-08-11T07:18:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeabfec9-9d20-4e9f-b040-99be3a7b7192", "eventTime": "2019-08-11T07:18:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeabfec9-9d20-4e9f-b040-99be3a7b7192", "record_id": "flaws_cloudtrail:0000368:aeabfec9-9d20-4e9f-b040-99be3a7b7192", "row_index": 368, "timestamp": "2019-08-11T07:18:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeabfec9-9d20-4e9f-b040-99be3a7b7192", "eventTime": "2019-08-11T07:18:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651253d6f-4e02-4477-8c29-ba6d424f9531", "record_id": "flaws_cloudtrail:0000369:651253d6f-4e02-4477-8c29-ba6d424f9531", "row_index": 369, "timestamp": "2019-08-11T07:19:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651253d6f-4e02-4477-8c29-ba6d424f9531", "eventTime": "2019-08-11T07:19:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651253d6f-4e02-4477-8c29-ba6d424f9531", "record_id": "flaws_cloudtrail:0000370:651253d6f-4e02-4477-8c29-ba6d424f9531", "row_index": 370, "timestamp": "2019-08-11T07:19:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651253d6f-4e02-4477-8c29-ba6d424f9531", "eventTime": "2019-08-11T07:19:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0bf58c9-f4f7-4129-b4d1-513e3ee1d5bb", "record_id": "flaws_cloudtrail:0000371:b0bf58c9-f4f7-4129-b4d1-513e3ee1d5bb", "row_index": 371, "timestamp": "2019-08-11T07:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0bf58c9-f4f7-4129-b4d1-513e3ee1d5bb", "eventTime": "2019-08-11T07:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"help\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "help"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0bf58c9-f4f7-4129-b4d1-513e3ee1d5bb", "record_id": "flaws_cloudtrail:0000372:b0bf58c9-f4f7-4129-b4d1-513e3ee1d5bb", "row_index": 372, "timestamp": "2019-08-11T07:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0bf58c9-f4f7-4129-b4d1-513e3ee1d5bb", "eventTime": "2019-08-11T07:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"help\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "help"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e511445-cac1-4a7e-bb73-8ff92ce9de65", "record_id": "flaws_cloudtrail:0000373:b9e511445-cac1-4a7e-bb73-8ff92ce9de65", "row_index": 373, "timestamp": "2019-08-11T07:21:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e511445-cac1-4a7e-bb73-8ff92ce9de65", "eventTime": "2019-08-11T07:21:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e511445-cac1-4a7e-bb73-8ff92ce9de65", "record_id": "flaws_cloudtrail:0000374:b9e511445-cac1-4a7e-bb73-8ff92ce9de65", "row_index": 374, "timestamp": "2019-08-11T07:21:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e511445-cac1-4a7e-bb73-8ff92ce9de65", "eventTime": "2019-08-11T07:21:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d22d222-8fd0-4d4d-94cc-dcf4eb631c3b", "record_id": "flaws_cloudtrail:0000375:5d22d222-8fd0-4d4d-94cc-dcf4eb631c3b", "row_index": 375, "timestamp": "2019-08-11T07:22:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d22d222-8fd0-4d4d-94cc-dcf4eb631c3b", "eventTime": "2019-08-11T07:22:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"0xdabbad00\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "0xdabbad00"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d22d222-8fd0-4d4d-94cc-dcf4eb631c3b", "record_id": "flaws_cloudtrail:0000376:5d22d222-8fd0-4d4d-94cc-dcf4eb631c3b", "row_index": 376, "timestamp": "2019-08-11T07:22:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d22d222-8fd0-4d4d-94cc-dcf4eb631c3b", "eventTime": "2019-08-11T07:22:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"0xdabbad00\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "0xdabbad00"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "660cc88d-f88a-4fec-95b6-89134a17703", "record_id": "flaws_cloudtrail:0000377:660cc88d-f88a-4fec-95b6-89134a17703", "row_index": 377, "timestamp": "2019-08-11T07:23:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "660cc88d-f88a-4fec-95b6-89134a17703", "eventTime": "2019-08-11T07:23:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "660cc88d-f88a-4fec-95b6-89134a17703", "record_id": "flaws_cloudtrail:0000378:660cc88d-f88a-4fec-95b6-89134a17703", "row_index": 378, "timestamp": "2019-08-11T07:23:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "660cc88d-f88a-4fec-95b6-89134a17703", "eventTime": "2019-08-11T07:23:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e77100-e79e-4d8c-81f1-25528f040c", "record_id": "flaws_cloudtrail:0000379:3e77100-e79e-4d8c-81f1-25528f040c", "row_index": 379, "timestamp": "2019-08-11T07:23:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e77100-e79e-4d8c-81f1-25528f040c", "eventTime": "2019-08-11T07:23:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"0xdabbad00\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "0xdabbad00"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e77100-e79e-4d8c-81f1-25528f040c", "record_id": "flaws_cloudtrail:0000380:3e77100-e79e-4d8c-81f1-25528f040c", "row_index": 380, "timestamp": "2019-08-11T07:23:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e77100-e79e-4d8c-81f1-25528f040c", "eventTime": "2019-08-11T07:23:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"0xdabbad00\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "0xdabbad00"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67d0bd9f-7a04-418c-8573-5e5a768f1a23", "record_id": "flaws_cloudtrail:0000381:67d0bd9f-7a04-418c-8573-5e5a768f1a23", "row_index": 381, "timestamp": "2019-08-11T07:23:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "[aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67d0bd9f-7a04-418c-8573-5e5a768f1a23", "eventTime": "2019-08-11T07:23:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "[aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67d0bd9f-7a04-418c-8573-5e5a768f1a23", "record_id": "flaws_cloudtrail:0000382:67d0bd9f-7a04-418c-8573-5e5a768f1a23", "row_index": 382, "timestamp": "2019-08-11T07:23:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "[aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67d0bd9f-7a04-418c-8573-5e5a768f1a23", "eventTime": "2019-08-11T07:23:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "[aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dc5add3-1c74-4d5d-af84-3ba75c692e10", "record_id": "flaws_cloudtrail:0000383:2dc5add3-1c74-4d5d-af84-3ba75c692e10", "row_index": 383, "timestamp": "2019-08-11T07:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dc5add3-1c74-4d5d-af84-3ba75c692e10", "eventTime": "2019-08-11T07:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATFU3XFZWP3QLRCJ0", "expiration": "Aug 11, 2019 1:58:37 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dc5add3-1c74-4d5d-af84-3ba75c692e10", "record_id": "flaws_cloudtrail:0000384:2dc5add3-1c74-4d5d-af84-3ba75c692e10", "row_index": 384, "timestamp": "2019-08-11T07:31:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dc5add3-1c74-4d5d-af84-3ba75c692e10", "eventTime": "2019-08-11T07:31:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIATFU3XFZWP3QLRCJ0", "expiration": "Aug 11, 2019 1:58:37 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d853c2-551e-4abb-998a-41ee079d5d2e", "record_id": "flaws_cloudtrail:0000385:e2d853c2-551e-4abb-998a-41ee079d5d2e", "row_index": 385, "timestamp": "2019-08-11T07:33:14Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d853c2-551e-4abb-998a-41ee079d5d2e", "eventTime": "2019-08-11T07:33:14Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d853c2-551e-4abb-998a-41ee079d5d2e", "record_id": "flaws_cloudtrail:0000386:e2d853c2-551e-4abb-998a-41ee079d5d2e", "row_index": 386, "timestamp": "2019-08-11T07:33:14Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d853c2-551e-4abb-998a-41ee079d5d2e", "eventTime": "2019-08-11T07:33:14Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27e1f41b-3c94-4c2b-b8c8-d8dee0557c59", "record_id": "flaws_cloudtrail:0000387:27e1f41b-3c94-4c2b-b8c8-d8dee0557c59", "row_index": 387, "timestamp": "2019-08-11T07:42:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27e1f41b-3c94-4c2b-b8c8-d8dee0557c59", "eventTime": "2019-08-11T07:42:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27e1f41b-3c94-4c2b-b8c8-d8dee0557c59", "record_id": "flaws_cloudtrail:0000388:27e1f41b-3c94-4c2b-b8c8-d8dee0557c59", "row_index": 388, "timestamp": "2019-08-11T07:42:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27e1f41b-3c94-4c2b-b8c8-d8dee0557c59", "eventTime": "2019-08-11T07:42:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84bac07d-9b72-4d34-9e90-0a18e131195", "record_id": "flaws_cloudtrail:0000389:84bac07d-9b72-4d34-9e90-0a18e131195", "row_index": 389, "timestamp": "2019-08-11T07:43:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84bac07d-9b72-4d34-9e90-0a18e131195", "eventTime": "2019-08-11T07:43:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84bac07d-9b72-4d34-9e90-0a18e131195", "record_id": "flaws_cloudtrail:0000390:84bac07d-9b72-4d34-9e90-0a18e131195", "row_index": 390, "timestamp": "2019-08-11T07:43:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84bac07d-9b72-4d34-9e90-0a18e131195", "eventTime": "2019-08-11T07:43:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9165ca-1be5-418f-8e76-d6de039f37c5", "record_id": "flaws_cloudtrail:0000391:ce9165ca-1be5-418f-8e76-d6de039f37c5", "row_index": 391, "timestamp": "2019-08-11T07:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9165ca-1be5-418f-8e76-d6de039f37c5", "eventTime": "2019-08-11T07:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9165ca-1be5-418f-8e76-d6de039f37c5", "record_id": "flaws_cloudtrail:0000392:ce9165ca-1be5-418f-8e76-d6de039f37c5", "row_index": 392, "timestamp": "2019-08-11T07:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9165ca-1be5-418f-8e76-d6de039f37c5", "eventTime": "2019-08-11T07:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.215 Python/2.7.16+ Linux/4.9.184-linuxkit botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74876fa9-da43-4699-a936-650a7fafcfd9", "record_id": "flaws_cloudtrail:0000393:74876fa9-da43-4699-a936-650a7fafcfd9", "row_index": 393, "timestamp": "2019-08-11T08:11:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "[aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74876fa9-da43-4699-a936-650a7fafcfd9", "eventTime": "2019-08-11T08:11:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "[aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74876fa9-da43-4699-a936-650a7fafcfd9", "record_id": "flaws_cloudtrail:0000394:74876fa9-da43-4699-a936-650a7fafcfd9", "row_index": 394, "timestamp": "2019-08-11T08:11:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "[aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74876fa9-da43-4699-a936-650a7fafcfd9", "eventTime": "2019-08-11T08:11:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "[aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d31e6fe5-d0cc-448a-a085-422eb7ad0851", "record_id": "flaws_cloudtrail:0000395:d31e6fe5-d0cc-448a-a085-422eb7ad0851", "row_index": 395, "timestamp": "2019-08-11T08:15:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d31e6fe5-d0cc-448a-a085-422eb7ad0851", "eventTime": "2019-08-11T08:15:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d31e6fe5-d0cc-448a-a085-422eb7ad0851", "record_id": "flaws_cloudtrail:0000396:d31e6fe5-d0cc-448a-a085-422eb7ad0851", "row_index": 396, "timestamp": "2019-08-11T08:15:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d31e6fe5-d0cc-448a-a085-422eb7ad0851", "eventTime": "2019-08-11T08:15:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acb13be-01af-4cd3-bb7d-6196dc7aad39", "record_id": "flaws_cloudtrail:0000397:4acb13be-01af-4cd3-bb7d-6196dc7aad39", "row_index": 397, "timestamp": "2019-08-11T08:17:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acb13be-01af-4cd3-bb7d-6196dc7aad39", "eventTime": "2019-08-11T08:17:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acb13be-01af-4cd3-bb7d-6196dc7aad39", "record_id": "flaws_cloudtrail:0000398:4acb13be-01af-4cd3-bb7d-6196dc7aad39", "row_index": 398, "timestamp": "2019-08-11T08:17:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acb13be-01af-4cd3-bb7d-6196dc7aad39", "eventTime": "2019-08-11T08:17:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d37405b-1b67-48eb-b162-7c5fa02ad64c", "record_id": "flaws_cloudtrail:0000399:9d37405b-1b67-48eb-b162-7c5fa02ad64c", "row_index": 399, "timestamp": "2019-08-11T08:17:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d37405b-1b67-48eb-b162-7c5fa02ad64c", "eventTime": "2019-08-11T08:17:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJySlhtVWljL0JpMkNQaUh2ZEhIY2hZWlYxN0NPUmdXTFdPWkM3NHZwS3FWc3N3RkExc2JtTmlmYkw3TU0xNzlOR3pKOENCYXFWQ2FyamhBRi9UTVI4RzU5M0V2VGFRVmJCK1NGT3pNRjdZQVlhYjVJMVA4ZnFVYzduZ1pGM2FaeGhUbDFzZi9nYm5GSmVpWHRrLzRxZGtwR2xqeVhHWWlsdCt3MnAvc05YemdQcjRzWFgwWldMR2ZTcm9FeGM1QnB5aS9uc2VNenFhdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d37405b-1b67-48eb-b162-7c5fa02ad64c", "record_id": "flaws_cloudtrail:0000400:9d37405b-1b67-48eb-b162-7c5fa02ad64c", "row_index": 400, "timestamp": "2019-08-11T08:17:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d37405b-1b67-48eb-b162-7c5fa02ad64c", "eventTime": "2019-08-11T08:17:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJySlhtVWljL0JpMkNQaUh2ZEhIY2hZWlYxN0NPUmdXTFdPWkM3NHZwS3FWc3N3RkExc2JtTmlmYkw3TU0xNzlOR3pKOENCYXFWQ2FyamhBRi9UTVI4RzU5M0V2VGFRVmJCK1NGT3pNRjdZQVlhYjVJMVA4ZnFVYzduZ1pGM2FaeGhUbDFzZi9nYm5GSmVpWHRrLzRxZGtwR2xqeVhHWWlsdCt3MnAvc05YemdQcjRzWFgwWldMR2ZTcm9FeGM1QnB5aS9uc2VNenFhdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ff9ecc9-0fed-4d7e-aae2-1d4218e3a323", "record_id": "flaws_cloudtrail:0000401:5ff9ecc9-0fed-4d7e-aae2-1d4218e3a323", "row_index": 401, "timestamp": "2019-08-11T08:17:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ff9ecc9-0fed-4d7e-aae2-1d4218e3a323", "eventTime": "2019-08-11T08:17:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJja3dJR2h2WER3R0N1M1puSk9MWGlIWThPYTkxY3pzODdwT05qdEpaOVB1RkYxM1AyQVNsQjNuMjFYY2xDSEg2S3BJMXJZekNkT1Y4OTJQMUZQOVJDbDN4S3VpN2xJbjZxT1RNL0tmTytuVURXRjlSTklmVjlUZ0JOd2FNTk1YVnZUemFZeHJJZks5cUh5UGRGNWpnaGh3OEd1cWlkdnFBT0lPbWZsQzA3a3d4QjFHYWp6L1lNaENXTnVqaTJxQTNCSG1zbVFSdGRYMVFidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ff9ecc9-0fed-4d7e-aae2-1d4218e3a323", "record_id": "flaws_cloudtrail:0000402:5ff9ecc9-0fed-4d7e-aae2-1d4218e3a323", "row_index": 402, "timestamp": "2019-08-11T08:17:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ff9ecc9-0fed-4d7e-aae2-1d4218e3a323", "eventTime": "2019-08-11T08:17:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJja3dJR2h2WER3R0N1M1puSk9MWGlIWThPYTkxY3pzODdwT05qdEpaOVB1RkYxM1AyQVNsQjNuMjFYY2xDSEg2S3BJMXJZekNkT1Y4OTJQMUZQOVJDbDN4S3VpN2xJbjZxT1RNL0tmTytuVURXRjlSTklmVjlUZ0JOd2FNTk1YVnZUemFZeHJJZks5cUh5UGRGNWpnaGh3OEd1cWlkdnFBT0lPbWZsQzA3a3d4QjFHYWp6L1lNaENXTnVqaTJxQTNCSG1zbVFSdGRYMVFidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8826dfc9-2b9c-484f-8c7c-a02dce537611", "record_id": "flaws_cloudtrail:0000403:8826dfc9-2b9c-484f-8c7c-a02dce537611", "row_index": 403, "timestamp": "2019-08-11T08:17:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8826dfc9-2b9c-484f-8c7c-a02dce537611", "eventTime": "2019-08-11T08:17:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjN3NYQ0UwNXp2VDJNVjFjUGFWRTE2NjlzS1JPUUpWbW9HQ29OUkVranVGNmRXelcreWdpOGJ2RXpDZW5PRm9oOG5ybnBhQmF1N3lrSHpMWjZxcThRTVoxSHI0OE1GMWUrVDFpZllSaDljczNWTmwybXloQTEwQXJ4bm5yWFhIYnZmeGtNUklEWUR0VTBoVEZMVkRJUXlhSGlxbzdUTnMyVitMaTJlUVNEZ3l5NVdnNUhEaFloemNyak1KeU5nZFZ5VERMS1Q0aHArVzd1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8826dfc9-2b9c-484f-8c7c-a02dce537611", "record_id": "flaws_cloudtrail:0000404:8826dfc9-2b9c-484f-8c7c-a02dce537611", "row_index": 404, "timestamp": "2019-08-11T08:17:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8826dfc9-2b9c-484f-8c7c-a02dce537611", "eventTime": "2019-08-11T08:17:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjN3NYQ0UwNXp2VDJNVjFjUGFWRTE2NjlzS1JPUUpWbW9HQ29OUkVranVGNmRXelcreWdpOGJ2RXpDZW5PRm9oOG5ybnBhQmF1N3lrSHpMWjZxcThRTVoxSHI0OE1GMWUrVDFpZllSaDljczNWTmwybXloQTEwQXJ4bm5yWFhIYnZmeGtNUklEWUR0VTBoVEZMVkRJUXlhSGlxbzdUTnMyVitMaTJlUVNEZ3l5NVdnNUhEaFloemNyak1KeU5nZFZ5VERMS1Q0aHArVzd1Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ffb4fc-08bf-49b6-8b13-be54ebaf750b", "record_id": "flaws_cloudtrail:0000405:52ffb4fc-08bf-49b6-8b13-be54ebaf750b", "row_index": 405, "timestamp": "2019-08-11T08:17:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ffb4fc-08bf-49b6-8b13-be54ebaf750b", "eventTime": "2019-08-11T08:17:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6UjJndGx2T3Q2TkZmYkMzZFQzclVKcW02UUhGMlJMeXFNLzk0SExNTCt3ZmFzZU5CWWNHYkV6YVY2Q1pmNkdEOVlRemErYlJ2SGw3d2x4aUhQUkxVY0EyTzRSeEVJQWUybnZXWWxLb0oyZUg4U0oxZ21LS3BWaGFaa05mWkxQZnhJdkx3aHc5RWlQejc3cVFkL24yQ0xOWG9jM1JQemZmV05sRElWTVJRd3cvajdkSGhod2UxeEJ6MGp6b0ZPcEdCeitQeDkyOEdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ffb4fc-08bf-49b6-8b13-be54ebaf750b", "record_id": "flaws_cloudtrail:0000406:52ffb4fc-08bf-49b6-8b13-be54ebaf750b", "row_index": 406, "timestamp": "2019-08-11T08:17:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ffb4fc-08bf-49b6-8b13-be54ebaf750b", "eventTime": "2019-08-11T08:17:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6UjJndGx2T3Q2TkZmYkMzZFQzclVKcW02UUhGMlJMeXFNLzk0SExNTCt3ZmFzZU5CWWNHYkV6YVY2Q1pmNkdEOVlRemErYlJ2SGw3d2x4aUhQUkxVY0EyTzRSeEVJQWUybnZXWWxLb0oyZUg4U0oxZ21LS3BWaGFaa05mWkxQZnhJdkx3aHc5RWlQejc3cVFkL24yQ0xOWG9jM1JQemZmV05sRElWTVJRd3cvajdkSGhod2UxeEJ6MGp6b0ZPcEdCeitQeDkyOEdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ce42a5d-fc3e-434b-ab00-1b972aa69fcb", "record_id": "flaws_cloudtrail:0000407:7ce42a5d-fc3e-434b-ab00-1b972aa69fcb", "row_index": 407, "timestamp": "2019-08-11T08:17:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ce42a5d-fc3e-434b-ab00-1b972aa69fcb", "eventTime": "2019-08-11T08:17:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOSmFyZDJYaVd5V0tWV3B6ZHVtQ0pYWGZjSlkzbE02UUF0TVdqZnR6TmkwNlpFZTdpWCtXbkZhdWMzYVd4TmVPcDAwYmRNRzBMejhhUkZBZlU1WEtTQzJMZU8vcW9DS1hvRFZ5OEFGOFhYaWNtaVJnTzZXVXN5TzE0aG1TK0lwNE1OSnVOakJFWko3bVJweThpT2ROQnJBMGJmR0psdnJkMnZ2UUZNK3ZoWkJFaXVFV1JsTTUrTTZ6ZHBIK2ZiRk5XeFU1Z3BtSDNwMVNzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ce42a5d-fc3e-434b-ab00-1b972aa69fcb", "record_id": "flaws_cloudtrail:0000408:7ce42a5d-fc3e-434b-ab00-1b972aa69fcb", "row_index": 408, "timestamp": "2019-08-11T08:17:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ce42a5d-fc3e-434b-ab00-1b972aa69fcb", "eventTime": "2019-08-11T08:17:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOSmFyZDJYaVd5V0tWV3B6ZHVtQ0pYWGZjSlkzbE02UUF0TVdqZnR6TmkwNlpFZTdpWCtXbkZhdWMzYVd4TmVPcDAwYmRNRzBMejhhUkZBZlU1WEtTQzJMZU8vcW9DS1hvRFZ5OEFGOFhYaWNtaVJnTzZXVXN5TzE0aG1TK0lwNE1OSnVOakJFWko3bVJweThpT2ROQnJBMGJmR0psdnJkMnZ2UUZNK3ZoWkJFaXVFV1JsTTUrTTZ6ZHBIK2ZiRk5XeFU1Z3BtSDNwMVNzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c631491-c321-4451-b9a9-9bd16d2dfabc", "record_id": "flaws_cloudtrail:0000409:c631491-c321-4451-b9a9-9bd16d2dfabc", "row_index": 409, "timestamp": "2019-08-11T08:17:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c631491-c321-4451-b9a9-9bd16d2dfabc", "eventTime": "2019-08-11T08:17:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNOEdUczFxNk5YM1BoTldUcnFhL0djcXhFVlJNdkdFdW14MUppM2xaOWNEVWs2K25YOUpTeitJRjVhbnVpSjlhK2FOT2xobVFLd1hhQkw1Q1I3ODJPeFYvQzZmcnhoZmZlWDFtc0wwWE0rR2doOWJYMEJpOURFNUNlYlc5NUVDb002NEJ6RERqZ0kxL0sxbFRaSFVNbmlJRXU1dlc3SXdsRWtYbE5xR1BWWUg3NVZleTFFaEdxbHMzZks2RHo1Qm9iTnpzMzlsNGJNYWRSZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c631491-c321-4451-b9a9-9bd16d2dfabc", "record_id": "flaws_cloudtrail:0000410:c631491-c321-4451-b9a9-9bd16d2dfabc", "row_index": 410, "timestamp": "2019-08-11T08:17:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c631491-c321-4451-b9a9-9bd16d2dfabc", "eventTime": "2019-08-11T08:17:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNOEdUczFxNk5YM1BoTldUcnFhL0djcXhFVlJNdkdFdW14MUppM2xaOWNEVWs2K25YOUpTeitJRjVhbnVpSjlhK2FOT2xobVFLd1hhQkw1Q1I3ODJPeFYvQzZmcnhoZmZlWDFtc0wwWE0rR2doOWJYMEJpOURFNUNlYlc5NUVDb002NEJ6RERqZ0kxL0sxbFRaSFVNbmlJRXU1dlc3SXdsRWtYbE5xR1BWWUg3NVZleTFFaEdxbHMzZks2RHo1Qm9iTnpzMzlsNGJNYWRSZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef936819-84d5-4e69-a47a-fc3127692213", "record_id": "flaws_cloudtrail:0000411:5ef936819-84d5-4e69-a47a-fc3127692213", "row_index": 411, "timestamp": "2019-08-11T08:17:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef936819-84d5-4e69-a47a-fc3127692213", "eventTime": "2019-08-11T08:17:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBYm83T1VNRGdTN0tiWm44bkRSTUI1eVF3ZUdIbUh5emdoc1NzdTRQSGRqc0pyRlVFcWxROEFEOXoveWc0b0RxZWRqYTlONjY1Sk90ckFZN3BmN0RIT25JcU1wY0NzMHRZbkgvdmo1N2ttZno3NUsvUUIvTnI3YUR3eExjTzlUSTdIcjB2SVBwV2Nhc2RTbTN2aGdnY0FjMjVCaUg1SGFKNXV1emR1WjZxK1dxdk40Q1dCRmZDSEdoU3RoWEVLNFJJUzZaVnZkZDU2U2ZhUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef936819-84d5-4e69-a47a-fc3127692213", "record_id": "flaws_cloudtrail:0000412:5ef936819-84d5-4e69-a47a-fc3127692213", "row_index": 412, "timestamp": "2019-08-11T08:17:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef936819-84d5-4e69-a47a-fc3127692213", "eventTime": "2019-08-11T08:17:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBYm83T1VNRGdTN0tiWm44bkRSTUI1eVF3ZUdIbUh5emdoc1NzdTRQSGRqc0pyRlVFcWxROEFEOXoveWc0b0RxZWRqYTlONjY1Sk90ckFZN3BmN0RIT25JcU1wY0NzMHRZbkgvdmo1N2ttZno3NUsvUUIvTnI3YUR3eExjTzlUSTdIcjB2SVBwV2Nhc2RTbTN2aGdnY0FjMjVCaUg1SGFKNXV1emR1WjZxK1dxdk40Q1dCRmZDSEdoU3RoWEVLNFJJUzZaVnZkZDU2U2ZhUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eec8ced-46c6-4d28-a9f1-e1b335bea73e", "record_id": "flaws_cloudtrail:0000413:2eec8ced-46c6-4d28-a9f1-e1b335bea73e", "row_index": 413, "timestamp": "2019-08-11T08:17:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eec8ced-46c6-4d28-a9f1-e1b335bea73e", "eventTime": "2019-08-11T08:17:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBcDR6R2d3WHVnOHNKZXU5UVJqQlJXSTJNbXAvNy9UbTJEbHFjNDBMZWZyQ0duZVREckRISStmcklSc1V2MnVQdmdjb3p3SUJ4UWZiWWdMMGdWS2ZJM0ltSElqT1d6TVBlcVcwSHQyVFBFRmM0THVkeVpxaWlpd1o1WnBZRVE0MGhSdzZCOS9kNFNNVDI1SEsyTzNpdittZlloQTFlSmVxZFZFRnVIUlV4bjJkTDBkSDgwYjZDalJrL0gxQ1FLTXIzODJlVi9ZQW1sZmROZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eec8ced-46c6-4d28-a9f1-e1b335bea73e", "record_id": "flaws_cloudtrail:0000414:2eec8ced-46c6-4d28-a9f1-e1b335bea73e", "row_index": 414, "timestamp": "2019-08-11T08:17:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eec8ced-46c6-4d28-a9f1-e1b335bea73e", "eventTime": "2019-08-11T08:17:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBcDR6R2d3WHVnOHNKZXU5UVJqQlJXSTJNbXAvNy9UbTJEbHFjNDBMZWZyQ0duZVREckRISStmcklSc1V2MnVQdmdjb3p3SUJ4UWZiWWdMMGdWS2ZJM0ltSElqT1d6TVBlcVcwSHQyVFBFRmM0THVkeVpxaWlpd1o1WnBZRVE0MGhSdzZCOS9kNFNNVDI1SEsyTzNpdittZlloQTFlSmVxZFZFRnVIUlV4bjJkTDBkSDgwYjZDalJrL0gxQ1FLTXIzODJlVi9ZQW1sZmROZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b93163b-119b-4126-99d0-4643b55700e", "record_id": "flaws_cloudtrail:0000415:b93163b-119b-4126-99d0-4643b55700e", "row_index": 415, "timestamp": "2019-08-11T08:17:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b93163b-119b-4126-99d0-4643b55700e", "eventTime": "2019-08-11T08:17:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMG1vS2gvdHZlQ0o4aGVldXlVdlNCa1R6Rjk2cGQyeDEzMnFzQnQxL1p6cm5nRGRPZXpUY0JmQnJReHJYZFhva3praGpqUUM0U1FYUDUxdEhpbmpsQkNFSmdqVjhPNWYyRG9mYVNzdDNzajFnNHRqaENJTlJWQzFKUXQ3VTk2cFp4WUpaRDBvYnE5K2tML2ZRZlM3RUhYRElJWTBYWDNFb1JhRkpTRnRQUWZXREk2ekNmSW5QREdFQWZYQ0s5ZEd3TExTSU14RVlnUlIzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b93163b-119b-4126-99d0-4643b55700e", "record_id": "flaws_cloudtrail:0000416:b93163b-119b-4126-99d0-4643b55700e", "row_index": 416, "timestamp": "2019-08-11T08:17:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b93163b-119b-4126-99d0-4643b55700e", "eventTime": "2019-08-11T08:17:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMG1vS2gvdHZlQ0o4aGVldXlVdlNCa1R6Rjk2cGQyeDEzMnFzQnQxL1p6cm5nRGRPZXpUY0JmQnJReHJYZFhva3praGpqUUM0U1FYUDUxdEhpbmpsQkNFSmdqVjhPNWYyRG9mYVNzdDNzajFnNHRqaENJTlJWQzFKUXQ3VTk2cFp4WUpaRDBvYnE5K2tML2ZRZlM3RUhYRElJWTBYWDNFb1JhRkpTRnRQUWZXREk2ekNmSW5QREdFQWZYQ0s5ZEd3TExTSU14RVlnUlIzdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119c978b-9f7e-4553-8ea2-b8bc03c02d21", "record_id": "flaws_cloudtrail:0000417:119c978b-9f7e-4553-8ea2-b8bc03c02d21", "row_index": 417, "timestamp": "2019-08-11T08:18:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119c978b-9f7e-4553-8ea2-b8bc03c02d21", "eventTime": "2019-08-11T08:18:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDTytETk5JOUpDTjFtR2JpK0ozdmpkSGpLNGV0SnhIUzdQVTdQaldKcW1EeC9qZ2dPM1pjcFVONExUVjc5dmVBUUlBY25qZE9BTS9odUovM2NneVVYWWNyUzA1T0gwZVZ5d1RaOXVINGUvS3kxTGhSN2xtUGlNNW1DQmpMZEJRZ2F2YlFPTkI5SklYV2FXclhMK3NZUzgweXpFdTRBd3hWd1gxa2o1eElBTzRJY3JsNHdtdU1NSzNaQXd1Z2FMbHZjZ2xyWFpSZkZrSUdvZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119c978b-9f7e-4553-8ea2-b8bc03c02d21", "record_id": "flaws_cloudtrail:0000418:119c978b-9f7e-4553-8ea2-b8bc03c02d21", "row_index": 418, "timestamp": "2019-08-11T08:18:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119c978b-9f7e-4553-8ea2-b8bc03c02d21", "eventTime": "2019-08-11T08:18:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDTytETk5JOUpDTjFtR2JpK0ozdmpkSGpLNGV0SnhIUzdQVTdQaldKcW1EeC9qZ2dPM1pjcFVONExUVjc5dmVBUUlBY25qZE9BTS9odUovM2NneVVYWWNyUzA1T0gwZVZ5d1RaOXVINGUvS3kxTGhSN2xtUGlNNW1DQmpMZEJRZ2F2YlFPTkI5SklYV2FXclhMK3NZUzgweXpFdTRBd3hWd1gxa2o1eElBTzRJY3JsNHdtdU1NSzNaQXd1Z2FMbHZjZ2xyWFpSZkZrSUdvZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63e22b85-1ca8-42b0-989f-3a7dd67195b4", "record_id": "flaws_cloudtrail:0000419:63e22b85-1ca8-42b0-989f-3a7dd67195b4", "row_index": 419, "timestamp": "2019-08-11T08:18:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63e22b85-1ca8-42b0-989f-3a7dd67195b4", "eventTime": "2019-08-11T08:18:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrVTVkanBaRHZVZlNWOWdvQ2MydlR5dkg2dU9POEFOdUQyUTZyeEs5VDdndUM2WDlwZkZ4Vmx0L1VWeXU1bFZtRE4yWk9ONUlqRnlyYlRhZXdmQ1RvYWtMK2c5cHRVc1hhamc0SEdoZGxzblpFdDN2L1VZQlF5b080TkZFSzluQVp3d05XUzRBZXlHUDFRU1RRc29JNlJMUExDRHlnTGErcUFRV2MyL1UzZCsvdWVCUDF6Yk1JSlRiY3FiVTVkZGRlaGc1L1BkcWlLS3U0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63e22b85-1ca8-42b0-989f-3a7dd67195b4", "record_id": "flaws_cloudtrail:0000420:63e22b85-1ca8-42b0-989f-3a7dd67195b4", "row_index": 420, "timestamp": "2019-08-11T08:18:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63e22b85-1ca8-42b0-989f-3a7dd67195b4", "eventTime": "2019-08-11T08:18:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrVTVkanBaRHZVZlNWOWdvQ2MydlR5dkg2dU9POEFOdUQyUTZyeEs5VDdndUM2WDlwZkZ4Vmx0L1VWeXU1bFZtRE4yWk9ONUlqRnlyYlRhZXdmQ1RvYWtMK2c5cHRVc1hhamc0SEdoZGxzblpFdDN2L1VZQlF5b080TkZFSzluQVp3d05XUzRBZXlHUDFRU1RRc29JNlJMUExDRHlnTGErcUFRV2MyL1UzZCsvdWVCUDF6Yk1JSlRiY3FiVTVkZGRlaGc1L1BkcWlLS3U0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "621207a-2843-418c-ad1d-f37be82e2516", "record_id": "flaws_cloudtrail:0000421:621207a-2843-418c-ad1d-f37be82e2516", "row_index": 421, "timestamp": "2019-08-11T08:18:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "621207a-2843-418c-ad1d-f37be82e2516", "eventTime": "2019-08-11T08:18:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTUWIwd21zTXNoQURld0xHeXVlTGlFZVk1UUtEUkF2dzJkbklzckdpQlV0QlpDYTJtNDQ5UzZNNjVsNXlqSTlIM2c4cmY0UE04b0grT2pDaXFQS1NjVDFuaExhNnUveHd0eUZpQi8xcWNVVWpkYlJXd3Y4MW92YTFBZGs1UWdTSnA1YTgvR1lKTDRwQXJ4ZlA5YTIySWxiM2EzK09xd3FZQXZESmVJazUyUEpXRzRJTkU4M3dKejhvWWhLcTgzQVk5ZlFwMEp1R29RUGNldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "621207a-2843-418c-ad1d-f37be82e2516", "record_id": "flaws_cloudtrail:0000422:621207a-2843-418c-ad1d-f37be82e2516", "row_index": 422, "timestamp": "2019-08-11T08:18:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "621207a-2843-418c-ad1d-f37be82e2516", "eventTime": "2019-08-11T08:18:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTUWIwd21zTXNoQURld0xHeXVlTGlFZVk1UUtEUkF2dzJkbklzckdpQlV0QlpDYTJtNDQ5UzZNNjVsNXlqSTlIM2c4cmY0UE04b0grT2pDaXFQS1NjVDFuaExhNnUveHd0eUZpQi8xcWNVVWpkYlJXd3Y4MW92YTFBZGs1UWdTSnA1YTgvR1lKTDRwQXJ4ZlA5YTIySWxiM2EzK09xd3FZQXZESmVJazUyUEpXRzRJTkU4M3dKejhvWWhLcTgzQVk5ZlFwMEp1R29RUGNldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ceecbd-e513-4d77-bcad-8b2870d39e91", "record_id": "flaws_cloudtrail:0000423:76ceecbd-e513-4d77-bcad-8b2870d39e91", "row_index": 423, "timestamp": "2019-08-11T08:18:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ceecbd-e513-4d77-bcad-8b2870d39e91", "eventTime": "2019-08-11T08:18:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMM1hyUkppNlNrckRBcWtFZTVHYkJMZWp3Z0JIWEFBZGxSRkprNGNWUXI5UXBWQVBoSkcwSi94TXBTa05zamxGeUlaVDdvVDFGT1JibGFOdTZseFI0RnAwaWpJZmd3MGtvTTJRTzJtb1VOWWNORFUwY0tCcmIwbXpCSjZiblptVDUyL0V0b1E2MlloeXorQ294RWVXYlBiTWhVQjF5d3lsRTYwMCtmemVjZGhkdUs3ZGNrdjdQeXVwQTdiZDRxdmswNHFFd1QxRmV6Mm9jZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ceecbd-e513-4d77-bcad-8b2870d39e91", "record_id": "flaws_cloudtrail:0000424:76ceecbd-e513-4d77-bcad-8b2870d39e91", "row_index": 424, "timestamp": "2019-08-11T08:18:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ceecbd-e513-4d77-bcad-8b2870d39e91", "eventTime": "2019-08-11T08:18:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMM1hyUkppNlNrckRBcWtFZTVHYkJMZWp3Z0JIWEFBZGxSRkprNGNWUXI5UXBWQVBoSkcwSi94TXBTa05zamxGeUlaVDdvVDFGT1JibGFOdTZseFI0RnAwaWpJZmd3MGtvTTJRTzJtb1VOWWNORFUwY0tCcmIwbXpCSjZiblptVDUyL0V0b1E2MlloeXorQ294RWVXYlBiTWhVQjF5d3lsRTYwMCtmemVjZGhkdUs3ZGNrdjdQeXVwQTdiZDRxdmswNHFFd1QxRmV6Mm9jZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe6720b-f542-4efa-9788-d10b052e7bbf", "record_id": "flaws_cloudtrail:0000425:2fe6720b-f542-4efa-9788-d10b052e7bbf", "row_index": 425, "timestamp": "2019-08-11T08:18:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe6720b-f542-4efa-9788-d10b052e7bbf", "eventTime": "2019-08-11T08:18:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5WENWZWp0SElzb3B2RmdpLzY0Sm92eEtFVzZWVTdFNENnbnBVWlpqOEpEQnpIaVdUOE1VdXNhM2F6cGwwcGhDTGh2bHR2UWVienltSnlYN2VQT0xjdkxUQy90VitkaXJGRDA4ZDRDck9XRExadXRmOEtQZG44N3lsK01PVDM1UGlTM2tIL2txNlBWRGMwc09uVmIwbHpxUDZPTDY1M0dpeUlGWmd5TXppSndXakpUbXNwZXhtdmJZQUxiazdMVm4vOXF1dExvWEg4L1I5eVA0M2pwYVljdjN5L0hVdHkwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe6720b-f542-4efa-9788-d10b052e7bbf", "record_id": "flaws_cloudtrail:0000426:2fe6720b-f542-4efa-9788-d10b052e7bbf", "row_index": 426, "timestamp": "2019-08-11T08:18:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe6720b-f542-4efa-9788-d10b052e7bbf", "eventTime": "2019-08-11T08:18:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5WENWZWp0SElzb3B2RmdpLzY0Sm92eEtFVzZWVTdFNENnbnBVWlpqOEpEQnpIaVdUOE1VdXNhM2F6cGwwcGhDTGh2bHR2UWVienltSnlYN2VQT0xjdkxUQy90VitkaXJGRDA4ZDRDck9XRExadXRmOEtQZG44N3lsK01PVDM1UGlTM2tIL2txNlBWRGMwc09uVmIwbHpxUDZPTDY1M0dpeUlGWmd5TXppSndXakpUbXNwZXhtdmJZQUxiazdMVm4vOXF1dExvWEg4L1I5eVA0M2pwYVljdjN5L0hVdHkwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba4f496-03e3-4f1d-acae-9a49c05d231d", "record_id": "flaws_cloudtrail:0000427:8ba4f496-03e3-4f1d-acae-9a49c05d231d", "row_index": 427, "timestamp": "2019-08-11T08:18:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba4f496-03e3-4f1d-acae-9a49c05d231d", "eventTime": "2019-08-11T08:18:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6TGU5UThxRmJOMHl4VnZTTld0RHNGcnhUYk9PNlN5ZDhPN3YrVndPTGd2YlEwNjVTaVBVZkthakp0amtSdU52d21zNE44NVpja2daTVlsU01LZkx1Z3VTZ3M2YVFzTFN2dktRU1V2bWhIWVVRRitMMVBPZHhtcEs3UDZvUmZVcTNZYmxnN0NORGx0WU5hbzJOWGQzWnNvYnBITm9MUUczUWtBSU84cldRczVvN2pSallwMWx6SUY2N1NUNVl0bUJyN2NZNVRralFBYTZ4MTVlK08xVnZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba4f496-03e3-4f1d-acae-9a49c05d231d", "record_id": "flaws_cloudtrail:0000428:8ba4f496-03e3-4f1d-acae-9a49c05d231d", "row_index": 428, "timestamp": "2019-08-11T08:18:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba4f496-03e3-4f1d-acae-9a49c05d231d", "eventTime": "2019-08-11T08:18:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6TGU5UThxRmJOMHl4VnZTTld0RHNGcnhUYk9PNlN5ZDhPN3YrVndPTGd2YlEwNjVTaVBVZkthakp0amtSdU52d21zNE44NVpja2daTVlsU01LZkx1Z3VTZ3M2YVFzTFN2dktRU1V2bWhIWVVRRitMMVBPZHhtcEs3UDZvUmZVcTNZYmxnN0NORGx0WU5hbzJOWGQzWnNvYnBITm9MUUczUWtBSU84cldRczVvN2pSallwMWx6SUY2N1NUNVl0bUJyN2NZNVRralFBYTZ4MTVlK08xVnZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72548e-b2c9-4b66-9e67-f908100bdf7c5", "record_id": "flaws_cloudtrail:0000429:72548e-b2c9-4b66-9e67-f908100bdf7c5", "row_index": 429, "timestamp": "2019-08-11T08:18:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72548e-b2c9-4b66-9e67-f908100bdf7c5", "eventTime": "2019-08-11T08:18:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1b2R1bDVMV3VMdE8zei9rV3lzYnUwQS90Q1liTUV6RXNqclNvZ3VxckIxNW1NNDNwNHRLbE1xRmJueW1pNzZnMHkzcW8vU3B2K0ErN0VqR243RGtXN1FscVlsMzlaakxQWEJ3ZjBveVp5eWxpWXRYS0ErdUprazZWNkUrTjJpSGRGdlExUkdPR0N1RDY3TG1tbjNtUUhJSnFnRWtjSnh1TGZIMHlCVytkQ1NyZWhVK2wySktFZmRLLzlHelRmNXlPaGRQVy9jOGhBQXkvSmovWmFTOFFJeXhIbUFuRHNZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72548e-b2c9-4b66-9e67-f908100bdf7c5", "record_id": "flaws_cloudtrail:0000430:72548e-b2c9-4b66-9e67-f908100bdf7c5", "row_index": 430, "timestamp": "2019-08-11T08:18:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72548e-b2c9-4b66-9e67-f908100bdf7c5", "eventTime": "2019-08-11T08:18:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1b2R1bDVMV3VMdE8zei9rV3lzYnUwQS90Q1liTUV6RXNqclNvZ3VxckIxNW1NNDNwNHRLbE1xRmJueW1pNzZnMHkzcW8vU3B2K0ErN0VqR243RGtXN1FscVlsMzlaakxQWEJ3ZjBveVp5eWxpWXRYS0ErdUprazZWNkUrTjJpSGRGdlExUkdPR0N1RDY3TG1tbjNtUUhJSnFnRWtjSnh1TGZIMHlCVytkQ1NyZWhVK2wySktFZmRLLzlHelRmNXlPaGRQVy9jOGhBQXkvSmovWmFTOFFJeXhIbUFuRHNZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "649fcf79-c954-453f-b98d-837276cc8674", "record_id": "flaws_cloudtrail:0000431:649fcf79-c954-453f-b98d-837276cc8674", "row_index": 431, "timestamp": "2019-08-11T08:18:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "649fcf79-c954-453f-b98d-837276cc8674", "eventTime": "2019-08-11T08:18:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrZjhrYlU0anJadDBzcjRzODVmcC9jVnA3cjN3M2NNWmh2S09FYWNQd2xlOUxoSFRwMkY2WFNqbXFpeVRrS2JEbm8zNzVNUGlNZmtoWlA5NTUyemZzamRYSDRTb3BQcG9kWWZDbmlkQzMxeG5qaDB1ZWVXVExiNGhGdGQyaUNZcDNSQzN6eGZvUEtjbDFVNmhXaXpuSU12MDlmd0JmZm5mVlQ2OVRjM2NFaTBTcERMaHQybk1UQW5FL1ZKaFRBTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "649fcf79-c954-453f-b98d-837276cc8674", "record_id": "flaws_cloudtrail:0000432:649fcf79-c954-453f-b98d-837276cc8674", "row_index": 432, "timestamp": "2019-08-11T08:18:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "649fcf79-c954-453f-b98d-837276cc8674", "eventTime": "2019-08-11T08:18:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrZjhrYlU0anJadDBzcjRzODVmcC9jVnA3cjN3M2NNWmh2S09FYWNQd2xlOUxoSFRwMkY2WFNqbXFpeVRrS2JEbm8zNzVNUGlNZmtoWlA5NTUyemZzamRYSDRTb3BQcG9kWWZDbmlkQzMxeG5qaDB1ZWVXVExiNGhGdGQyaUNZcDNSQzN6eGZvUEtjbDFVNmhXaXpuSU12MDlmd0JmZm5mVlQ2OVRjM2NFaTBTcERMaHQybk1UQW5FL1ZKaFRBTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "270400-1923-4b3c-92df-8b469695eff9", "record_id": "flaws_cloudtrail:0000433:270400-1923-4b3c-92df-8b469695eff9", "row_index": 433, "timestamp": "2019-08-11T08:18:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "270400-1923-4b3c-92df-8b469695eff9", "eventTime": "2019-08-11T08:18:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHaER4TnlSYWNac3QwaHRsWEIwZERpQUpHaWRlSkorZFZYSnRFYnhPWFdFUGxiZVhrQnQ4NWkzMUZmTVdyMk5iblE1WTlqalczRm15YkRjZWFrZ1VibHNKVXFWZVcvK3pjZDE2MHZPdGJhc3FocjhFTDZKalBzcXo5WGN0VE9UL0hkSlc5Wk82K052WnV1V2F4SXJSc0lYTlcvTlUrdDVkazY2dmJ6MUpvVFlUbzdVdnVNTFhTZFN1R3phL1EzUlhRRHU4YVdXWWlRR1B2QmhlNS80UGcwMVZOTnFEakc0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "270400-1923-4b3c-92df-8b469695eff9", "record_id": "flaws_cloudtrail:0000434:270400-1923-4b3c-92df-8b469695eff9", "row_index": 434, "timestamp": "2019-08-11T08:18:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "270400-1923-4b3c-92df-8b469695eff9", "eventTime": "2019-08-11T08:18:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHaER4TnlSYWNac3QwaHRsWEIwZERpQUpHaWRlSkorZFZYSnRFYnhPWFdFUGxiZVhrQnQ4NWkzMUZmTVdyMk5iblE1WTlqalczRm15YkRjZWFrZ1VibHNKVXFWZVcvK3pjZDE2MHZPdGJhc3FocjhFTDZKalBzcXo5WGN0VE9UL0hkSlc5Wk82K052WnV1V2F4SXJSc0lYTlcvTlUrdDVkazY2dmJ6MUpvVFlUbzdVdnVNTFhTZFN1R3phL1EzUlhRRHU4YVdXWWlRR1B2QmhlNS80UGcwMVZOTnFEakc0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae42c0b-e37a-46ce-bfaf-fb3430394953", "record_id": "flaws_cloudtrail:0000435:3ae42c0b-e37a-46ce-bfaf-fb3430394953", "row_index": 435, "timestamp": "2019-08-11T08:18:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae42c0b-e37a-46ce-bfaf-fb3430394953", "eventTime": "2019-08-11T08:18:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHQWF3NVN3Rzd2d2g3cDFtTG5nN3ZRQnMxek1DTWZPUEdWTXNCY3EwK3N6aFFZVDhrYU5pR1d0NGNxUDhZYVk5U3ZPQitnUXlROWFGNklMYTh1WVM3TWtUMG1yMG42MU5HWXFuUHFZTzBPN28wd2FGY2t6QWZRSmpnTUN5QzJ4NWJsQ2lLeTVGbk9FcFFtcW9tdTR0SlFsZlBtTHY0WmI1aWZ6cnVxY0p0NlM3bWxmQWVWSDFpdG04SFFiTG5vWlA1RWtSKzdpb0M5UlpHTEF0NnZjZnh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae42c0b-e37a-46ce-bfaf-fb3430394953", "record_id": "flaws_cloudtrail:0000436:3ae42c0b-e37a-46ce-bfaf-fb3430394953", "row_index": 436, "timestamp": "2019-08-11T08:18:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae42c0b-e37a-46ce-bfaf-fb3430394953", "eventTime": "2019-08-11T08:18:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHQWF3NVN3Rzd2d2g3cDFtTG5nN3ZRQnMxek1DTWZPUEdWTXNCY3EwK3N6aFFZVDhrYU5pR1d0NGNxUDhZYVk5U3ZPQitnUXlROWFGNklMYTh1WVM3TWtUMG1yMG42MU5HWXFuUHFZTzBPN28wd2FGY2t6QWZRSmpnTUN5QzJ4NWJsQ2lLeTVGbk9FcFFtcW9tdTR0SlFsZlBtTHY0WmI1aWZ6cnVxY0p0NlM3bWxmQWVWSDFpdG04SFFiTG5vWlA1RWtSKzdpb0M5UlpHTEF0NnZjZnh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c8b6ef-56b3-4594-973c-144f537d8f2c", "record_id": "flaws_cloudtrail:0000437:e0c8b6ef-56b3-4594-973c-144f537d8f2c", "row_index": 437, "timestamp": "2019-08-11T08:18:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c8b6ef-56b3-4594-973c-144f537d8f2c", "eventTime": "2019-08-11T08:18:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDZVhCaisrSVBDSERzTXMrTFRlMFkwclNUS3hoZHJONzczV0xUR0VJYVlOd3BHYitCYzRpR2pZQi9JbHJaVFhLMjEwcTQ1cmc2OVhoWnlQczdFNC82NE5JVld2NzJGNk5LVFRFcjBIazI4MW9hZ1NNK3JRQ1hTbk93QXQvOUpmYzhuUFRPT3d4dzNsdElKZ3J1N2Y2VCtmNzJmd1IxaEZEV3c0UEYvUUhjSzZkcGtHTThCU0ZUTGV0V21uZytyOTFlWWZsSDVJb3dTWlBpWjRmUzgybVFWMkk3Umx4akk0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c8b6ef-56b3-4594-973c-144f537d8f2c", "record_id": "flaws_cloudtrail:0000438:e0c8b6ef-56b3-4594-973c-144f537d8f2c", "row_index": 438, "timestamp": "2019-08-11T08:18:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c8b6ef-56b3-4594-973c-144f537d8f2c", "eventTime": "2019-08-11T08:18:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDZVhCaisrSVBDSERzTXMrTFRlMFkwclNUS3hoZHJONzczV0xUR0VJYVlOd3BHYitCYzRpR2pZQi9JbHJaVFhLMjEwcTQ1cmc2OVhoWnlQczdFNC82NE5JVld2NzJGNk5LVFRFcjBIazI4MW9hZ1NNK3JRQ1hTbk93QXQvOUpmYzhuUFRPT3d4dzNsdElKZ3J1N2Y2VCtmNzJmd1IxaEZEV3c0UEYvUUhjSzZkcGtHTThCU0ZUTGV0V21uZytyOTFlWWZsSDVJb3dTWlBpWjRmUzgybVFWMkk3Umx4akk0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636143-bd09-401c-8196-18882da4d454", "record_id": "flaws_cloudtrail:0000439:636143-bd09-401c-8196-18882da4d454", "row_index": 439, "timestamp": "2019-08-11T08:18:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636143-bd09-401c-8196-18882da4d454", "eventTime": "2019-08-11T08:18:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSG5UVUMrRDRVTmFRUHQ1ZUd6YXM3QWVGVkhYY3BYYzB1S3p6cXorZURsdDJaaEFyU3lKaUhBWHFsQTBhSWxJRStJdUJlRGswNFRLRlB3emxkV1dWMHpreEZuUWJGc29aOStGN2lhdWVzTVY5MUczQVY4T0EyaUw1MWpQNWVDNXZNMU9Bd1FmOExMWllmV2liVEZQbE1uMFRtaXVYc1lveWp5Kzhmb1RqdzlZS3owbUpyU0Qyc0RkdWg5Q20zMDduSEdXbnBSejM4TUJFM0hQUElRZS9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636143-bd09-401c-8196-18882da4d454", "record_id": "flaws_cloudtrail:0000440:636143-bd09-401c-8196-18882da4d454", "row_index": 440, "timestamp": "2019-08-11T08:18:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636143-bd09-401c-8196-18882da4d454", "eventTime": "2019-08-11T08:18:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSG5UVUMrRDRVTmFRUHQ1ZUd6YXM3QWVGVkhYY3BYYzB1S3p6cXorZURsdDJaaEFyU3lKaUhBWHFsQTBhSWxJRStJdUJlRGswNFRLRlB3emxkV1dWMHpreEZuUWJGc29aOStGN2lhdWVzTVY5MUczQVY4T0EyaUw1MWpQNWVDNXZNMU9Bd1FmOExMWllmV2liVEZQbE1uMFRtaXVYc1lveWp5Kzhmb1RqdzlZS3owbUpyU0Qyc0RkdWg5Q20zMDduSEdXbnBSejM4TUJFM0hQUElRZS9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d56463-f9a4-428c-a88e-edddbef2d74f", "record_id": "flaws_cloudtrail:0000441:d56463-f9a4-428c-a88e-edddbef2d74f", "row_index": 441, "timestamp": "2019-08-11T08:18:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d56463-f9a4-428c-a88e-edddbef2d74f", "eventTime": "2019-08-11T08:18:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwbndud2VPenhlSHllNitObkxCOXFkZld2NFRISzNzMlExbHVSREEwRGpkQ2FjKzhIczc1eHJ5OE1idmJ3QmZ0L2gzT2FlSENYVWhwZUhLamtiVndDOUZpL21sU2IwVTcvSHZSMFdpOVNoOXVJZ0VacXpzcFBYVVRmdTYxcVhCY0o2S014a0l3d0VkUFN3c3dkTnVxZmZRNUl2ZDA5YzNESGtQMXlZMHFMVVNyVjlybXR1UFFiaXlUSmpEdXBQS0IxRTRrZVNMYzBobTdnRXZQSEZrdHcvU3VrYUU3SDgwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d56463-f9a4-428c-a88e-edddbef2d74f", "record_id": "flaws_cloudtrail:0000442:d56463-f9a4-428c-a88e-edddbef2d74f", "row_index": 442, "timestamp": "2019-08-11T08:18:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d56463-f9a4-428c-a88e-edddbef2d74f", "eventTime": "2019-08-11T08:18:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwbndud2VPenhlSHllNitObkxCOXFkZld2NFRISzNzMlExbHVSREEwRGpkQ2FjKzhIczc1eHJ5OE1idmJ3QmZ0L2gzT2FlSENYVWhwZUhLamtiVndDOUZpL21sU2IwVTcvSHZSMFdpOVNoOXVJZ0VacXpzcFBYVVRmdTYxcVhCY0o2S014a0l3d0VkUFN3c3dkTnVxZmZRNUl2ZDA5YzNESGtQMXlZMHFMVVNyVjlybXR1UFFiaXlUSmpEdXBQS0IxRTRrZVNMYzBobTdnRXZQSEZrdHcvU3VrYUU3SDgwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7ef348-6eba-4898-8b3a-9c64453545e2", "record_id": "flaws_cloudtrail:0000443:7e7ef348-6eba-4898-8b3a-9c64453545e2", "row_index": 443, "timestamp": "2019-08-11T08:18:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7ef348-6eba-4898-8b3a-9c64453545e2", "eventTime": "2019-08-11T08:18:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJncVduaTVyUCsvZzNYdTJDdkoydjB6aFR4eG9nNVcxR3pGeXVCVFozbHZiUzdSK0RUVHdCc3RPUTVGdzVKYjBsUXZyUDNMT2xqd3BqV0c5MnhXbTgxVkl6SmNSV2tIK3U4WHk4Q2xmTVc2Q3poeDNEWXNPbVZMajIxcmpVTzRscURQN0dHekhScG1JV1dpaWMweEFlTUc0VzN4clBtWGdDY1U1R3ZwM2tBV1JEalVvSHh4RG9pWEZZbnZtOU8wcDkxaGVNbjEzS2gxMXRoZFdCdHk3b05nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7ef348-6eba-4898-8b3a-9c64453545e2", "record_id": "flaws_cloudtrail:0000444:7e7ef348-6eba-4898-8b3a-9c64453545e2", "row_index": 444, "timestamp": "2019-08-11T08:18:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7ef348-6eba-4898-8b3a-9c64453545e2", "eventTime": "2019-08-11T08:18:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJncVduaTVyUCsvZzNYdTJDdkoydjB6aFR4eG9nNVcxR3pGeXVCVFozbHZiUzdSK0RUVHdCc3RPUTVGdzVKYjBsUXZyUDNMT2xqd3BqV0c5MnhXbTgxVkl6SmNSV2tIK3U4WHk4Q2xmTVc2Q3poeDNEWXNPbVZMajIxcmpVTzRscURQN0dHekhScG1JV1dpaWMweEFlTUc0VzN4clBtWGdDY1U1R3ZwM2tBV1JEalVvSHh4RG9pWEZZbnZtOU8wcDkxaGVNbjEzS2gxMXRoZFdCdHk3b05nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "252e183d-b842-47c6-97af-e8278509d638", "record_id": "flaws_cloudtrail:0000445:252e183d-b842-47c6-97af-e8278509d638", "row_index": 445, "timestamp": "2019-08-11T08:20:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "252e183d-b842-47c6-97af-e8278509d638", "eventTime": "2019-08-11T08:20:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "252e183d-b842-47c6-97af-e8278509d638", "record_id": "flaws_cloudtrail:0000446:252e183d-b842-47c6-97af-e8278509d638", "row_index": 446, "timestamp": "2019-08-11T08:20:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.204.208.182", "user_agent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "252e183d-b842-47c6-97af-e8278509d638", "eventTime": "2019-08-11T08:20:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.204.208.182", "userAgent": "aws-cli/1.16.215 Python/2.7.13 Linux/4.12.0-kali1-amd64 botocore/1.12.205", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48b6239d-b247-4dca-bfe3-181fc90b369d", "record_id": "flaws_cloudtrail:0000447:48b6239d-b247-4dca-bfe3-181fc90b369d", "row_index": 447, "timestamp": "2019-08-11T08:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48b6239d-b247-4dca-bfe3-181fc90b369d", "eventTime": "2019-08-11T08:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2B11FDLR24PRLM8W", "expiration": "Aug 11, 2019 2:44:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48b6239d-b247-4dca-bfe3-181fc90b369d", "record_id": "flaws_cloudtrail:0000448:48b6239d-b247-4dca-bfe3-181fc90b369d", "row_index": 448, "timestamp": "2019-08-11T08:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48b6239d-b247-4dca-bfe3-181fc90b369d", "eventTime": "2019-08-11T08:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2B11FDLR24PRLM8W", "expiration": "Aug 11, 2019 2:44:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b784d51b-20d3-4561-9682-21f623961c", "record_id": "flaws_cloudtrail:0000449:b784d51b-20d3-4561-9682-21f623961c", "row_index": 449, "timestamp": "2019-08-11T08:53:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b784d51b-20d3-4561-9682-21f623961c", "eventTime": "2019-08-11T08:53:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b784d51b-20d3-4561-9682-21f623961c", "record_id": "flaws_cloudtrail:0000450:b784d51b-20d3-4561-9682-21f623961c", "row_index": 450, "timestamp": "2019-08-11T08:53:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b784d51b-20d3-4561-9682-21f623961c", "eventTime": "2019-08-11T08:53:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd62dac6-fa2c-457a-90f7-40cafa1622fa", "record_id": "flaws_cloudtrail:0000451:bd62dac6-fa2c-457a-90f7-40cafa1622fa", "row_index": 451, "timestamp": "2019-08-11T08:55:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd62dac6-fa2c-457a-90f7-40cafa1622fa", "eventTime": "2019-08-11T08:55:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd62dac6-fa2c-457a-90f7-40cafa1622fa", "record_id": "flaws_cloudtrail:0000452:bd62dac6-fa2c-457a-90f7-40cafa1622fa", "row_index": 452, "timestamp": "2019-08-11T08:55:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd62dac6-fa2c-457a-90f7-40cafa1622fa", "eventTime": "2019-08-11T08:55:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0656f3-f0db-485c-8886-c31ab130b7a8", "record_id": "flaws_cloudtrail:0000453:ea0656f3-f0db-485c-8886-c31ab130b7a8", "row_index": 453, "timestamp": "2019-08-11T08:55:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0656f3-f0db-485c-8886-c31ab130b7a8", "eventTime": "2019-08-11T08:55:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0656f3-f0db-485c-8886-c31ab130b7a8", "record_id": "flaws_cloudtrail:0000454:ea0656f3-f0db-485c-8886-c31ab130b7a8", "row_index": 454, "timestamp": "2019-08-11T08:55:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0656f3-f0db-485c-8886-c31ab130b7a8", "eventTime": "2019-08-11T08:55:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e28f7a7-0346-439a-9c5f-6dc39afa536f", "record_id": "flaws_cloudtrail:0000455:2e28f7a7-0346-439a-9c5f-6dc39afa536f", "row_index": 455, "timestamp": "2019-08-11T08:55:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e28f7a7-0346-439a-9c5f-6dc39afa536f", "eventTime": "2019-08-11T08:55:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e28f7a7-0346-439a-9c5f-6dc39afa536f", "record_id": "flaws_cloudtrail:0000456:2e28f7a7-0346-439a-9c5f-6dc39afa536f", "row_index": 456, "timestamp": "2019-08-11T08:55:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e28f7a7-0346-439a-9c5f-6dc39afa536f", "eventTime": "2019-08-11T08:55:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293a5f48-a4c3-4387-aa3e-0795feb8487a", "record_id": "flaws_cloudtrail:0000457:293a5f48-a4c3-4387-aa3e-0795feb8487a", "row_index": 457, "timestamp": "2019-08-11T08:55:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293a5f48-a4c3-4387-aa3e-0795feb8487a", "eventTime": "2019-08-11T08:55:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293a5f48-a4c3-4387-aa3e-0795feb8487a", "record_id": "flaws_cloudtrail:0000458:293a5f48-a4c3-4387-aa3e-0795feb8487a", "row_index": 458, "timestamp": "2019-08-11T08:55:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293a5f48-a4c3-4387-aa3e-0795feb8487a", "eventTime": "2019-08-11T08:55:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89045-901a-4312-b673-78f88049bae8", "record_id": "flaws_cloudtrail:0000459:89045-901a-4312-b673-78f88049bae8", "row_index": 459, "timestamp": "2019-08-11T08:55:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89045-901a-4312-b673-78f88049bae8", "eventTime": "2019-08-11T08:55:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89045-901a-4312-b673-78f88049bae8", "record_id": "flaws_cloudtrail:0000460:89045-901a-4312-b673-78f88049bae8", "row_index": 460, "timestamp": "2019-08-11T08:55:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89045-901a-4312-b673-78f88049bae8", "eventTime": "2019-08-11T08:55:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc173a5-2592-4b6e-8036-2e75681b91dd", "record_id": "flaws_cloudtrail:0000461:2fc173a5-2592-4b6e-8036-2e75681b91dd", "row_index": 461, "timestamp": "2019-08-11T08:58:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc173a5-2592-4b6e-8036-2e75681b91dd", "eventTime": "2019-08-11T08:58:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc173a5-2592-4b6e-8036-2e75681b91dd", "record_id": "flaws_cloudtrail:0000462:2fc173a5-2592-4b6e-8036-2e75681b91dd", "row_index": 462, "timestamp": "2019-08-11T08:58:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc173a5-2592-4b6e-8036-2e75681b91dd", "eventTime": "2019-08-11T08:58:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6aa142-6b89-4a21-883d-f952fc973234", "record_id": "flaws_cloudtrail:0000463:ed6aa142-6b89-4a21-883d-f952fc973234", "row_index": 463, "timestamp": "2019-08-11T08:58:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6aa142-6b89-4a21-883d-f952fc973234", "eventTime": "2019-08-11T08:58:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6aa142-6b89-4a21-883d-f952fc973234", "record_id": "flaws_cloudtrail:0000464:ed6aa142-6b89-4a21-883d-f952fc973234", "row_index": 464, "timestamp": "2019-08-11T08:58:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6aa142-6b89-4a21-883d-f952fc973234", "eventTime": "2019-08-11T08:58:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c8e8bf2-d61a-4ec8-a2da-84c9cc66ab7f", "record_id": "flaws_cloudtrail:0000465:2c8e8bf2-d61a-4ec8-a2da-84c9cc66ab7f", "row_index": 465, "timestamp": "2019-08-11T08:58:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c8e8bf2-d61a-4ec8-a2da-84c9cc66ab7f", "eventTime": "2019-08-11T08:58:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c8e8bf2-d61a-4ec8-a2da-84c9cc66ab7f", "record_id": "flaws_cloudtrail:0000466:2c8e8bf2-d61a-4ec8-a2da-84c9cc66ab7f", "row_index": 466, "timestamp": "2019-08-11T08:58:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c8e8bf2-d61a-4ec8-a2da-84c9cc66ab7f", "eventTime": "2019-08-11T08:58:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bd84aee-9301-4717-a052-961095a15928", "record_id": "flaws_cloudtrail:0000467:6bd84aee-9301-4717-a052-961095a15928", "row_index": 467, "timestamp": "2019-08-11T08:58:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bd84aee-9301-4717-a052-961095a15928", "eventTime": "2019-08-11T08:58:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bd84aee-9301-4717-a052-961095a15928", "record_id": "flaws_cloudtrail:0000468:6bd84aee-9301-4717-a052-961095a15928", "row_index": 468, "timestamp": "2019-08-11T08:58:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bd84aee-9301-4717-a052-961095a15928", "eventTime": "2019-08-11T08:58:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9532b54-5c15-4bc7-8b11-395a039e9b22", "record_id": "flaws_cloudtrail:0000469:e9532b54-5c15-4bc7-8b11-395a039e9b22", "row_index": 469, "timestamp": "2019-08-11T08:58:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9532b54-5c15-4bc7-8b11-395a039e9b22", "eventTime": "2019-08-11T08:58:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9532b54-5c15-4bc7-8b11-395a039e9b22", "record_id": "flaws_cloudtrail:0000470:e9532b54-5c15-4bc7-8b11-395a039e9b22", "row_index": 470, "timestamp": "2019-08-11T08:58:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9532b54-5c15-4bc7-8b11-395a039e9b22", "eventTime": "2019-08-11T08:58:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "296723c3f-c08b-432f-818b-d5db1fb025ea", "record_id": "flaws_cloudtrail:0000471:296723c3f-c08b-432f-818b-d5db1fb025ea", "row_index": 471, "timestamp": "2019-08-11T08:59:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "296723c3f-c08b-432f-818b-d5db1fb025ea", "eventTime": "2019-08-11T08:59:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "296723c3f-c08b-432f-818b-d5db1fb025ea", "record_id": "flaws_cloudtrail:0000472:296723c3f-c08b-432f-818b-d5db1fb025ea", "row_index": 472, "timestamp": "2019-08-11T08:59:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "296723c3f-c08b-432f-818b-d5db1fb025ea", "eventTime": "2019-08-11T08:59:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d325e745-2593-4de8-ad0c-9989ba582ecb", "record_id": "flaws_cloudtrail:0000473:d325e745-2593-4de8-ad0c-9989ba582ecb", "row_index": 473, "timestamp": "2019-08-11T09:01:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d325e745-2593-4de8-ad0c-9989ba582ecb", "eventTime": "2019-08-11T09:01:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d325e745-2593-4de8-ad0c-9989ba582ecb", "record_id": "flaws_cloudtrail:0000474:d325e745-2593-4de8-ad0c-9989ba582ecb", "row_index": 474, "timestamp": "2019-08-11T09:01:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d325e745-2593-4de8-ad0c-9989ba582ecb", "eventTime": "2019-08-11T09:01:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314340fdf-10c3-472b-9264-d9f37160d5c8", "record_id": "flaws_cloudtrail:0000475:314340fdf-10c3-472b-9264-d9f37160d5c8", "row_index": 475, "timestamp": "2019-08-11T09:01:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314340fdf-10c3-472b-9264-d9f37160d5c8", "eventTime": "2019-08-11T09:01:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314340fdf-10c3-472b-9264-d9f37160d5c8", "record_id": "flaws_cloudtrail:0000476:314340fdf-10c3-472b-9264-d9f37160d5c8", "row_index": 476, "timestamp": "2019-08-11T09:01:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314340fdf-10c3-472b-9264-d9f37160d5c8", "eventTime": "2019-08-11T09:01:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c1ca72-73da-4566-9fa8-c0ae654c4ba8", "record_id": "flaws_cloudtrail:0000477:c5c1ca72-73da-4566-9fa8-c0ae654c4ba8", "row_index": 477, "timestamp": "2019-08-11T09:01:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c1ca72-73da-4566-9fa8-c0ae654c4ba8", "eventTime": "2019-08-11T09:01:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c1ca72-73da-4566-9fa8-c0ae654c4ba8", "record_id": "flaws_cloudtrail:0000478:c5c1ca72-73da-4566-9fa8-c0ae654c4ba8", "row_index": 478, "timestamp": "2019-08-11T09:01:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c1ca72-73da-4566-9fa8-c0ae654c4ba8", "eventTime": "2019-08-11T09:01:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35ef2100-7f5e-4f7b-acdc-49699692aba8", "record_id": "flaws_cloudtrail:0000479:35ef2100-7f5e-4f7b-acdc-49699692aba8", "row_index": 479, "timestamp": "2019-08-11T09:01:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35ef2100-7f5e-4f7b-acdc-49699692aba8", "eventTime": "2019-08-11T09:01:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35ef2100-7f5e-4f7b-acdc-49699692aba8", "record_id": "flaws_cloudtrail:0000480:35ef2100-7f5e-4f7b-acdc-49699692aba8", "row_index": 480, "timestamp": "2019-08-11T09:01:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35ef2100-7f5e-4f7b-acdc-49699692aba8", "eventTime": "2019-08-11T09:01:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f65619a-f660-4160-9a92-377a2bf473497", "record_id": "flaws_cloudtrail:0000481:3f65619a-f660-4160-9a92-377a2bf473497", "row_index": 481, "timestamp": "2019-08-11T09:03:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f65619a-f660-4160-9a92-377a2bf473497", "eventTime": "2019-08-11T09:03:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f65619a-f660-4160-9a92-377a2bf473497", "record_id": "flaws_cloudtrail:0000482:3f65619a-f660-4160-9a92-377a2bf473497", "row_index": 482, "timestamp": "2019-08-11T09:03:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f65619a-f660-4160-9a92-377a2bf473497", "eventTime": "2019-08-11T09:03:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "795630a7b-f163-462a-b0e7-e348f74365", "record_id": "flaws_cloudtrail:0000483:795630a7b-f163-462a-b0e7-e348f74365", "row_index": 483, "timestamp": "2019-08-11T09:03:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "795630a7b-f163-462a-b0e7-e348f74365", "eventTime": "2019-08-11T09:03:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "795630a7b-f163-462a-b0e7-e348f74365", "record_id": "flaws_cloudtrail:0000484:795630a7b-f163-462a-b0e7-e348f74365", "row_index": 484, "timestamp": "2019-08-11T09:03:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "795630a7b-f163-462a-b0e7-e348f74365", "eventTime": "2019-08-11T09:03:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "172965be2-71c9-45b6-986f-172d3d541f98", "record_id": "flaws_cloudtrail:0000485:172965be2-71c9-45b6-986f-172d3d541f98", "row_index": 485, "timestamp": "2019-08-11T09:04:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "172965be2-71c9-45b6-986f-172d3d541f98", "eventTime": "2019-08-11T09:04:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "172965be2-71c9-45b6-986f-172d3d541f98", "record_id": "flaws_cloudtrail:0000486:172965be2-71c9-45b6-986f-172d3d541f98", "row_index": 486, "timestamp": "2019-08-11T09:04:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "172965be2-71c9-45b6-986f-172d3d541f98", "eventTime": "2019-08-11T09:04:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acdd0ea2-3de5-4408-a9b1-509806c07b7e7", "record_id": "flaws_cloudtrail:0000487:acdd0ea2-3de5-4408-a9b1-509806c07b7e7", "row_index": 487, "timestamp": "2019-08-11T09:05:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acdd0ea2-3de5-4408-a9b1-509806c07b7e7", "eventTime": "2019-08-11T09:05:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acdd0ea2-3de5-4408-a9b1-509806c07b7e7", "record_id": "flaws_cloudtrail:0000488:acdd0ea2-3de5-4408-a9b1-509806c07b7e7", "row_index": 488, "timestamp": "2019-08-11T09:05:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acdd0ea2-3de5-4408-a9b1-509806c07b7e7", "eventTime": "2019-08-11T09:05:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5fe653-a61a-4ff6-84dc-475ef2cafe71", "record_id": "flaws_cloudtrail:0000489:eb5fe653-a61a-4ff6-84dc-475ef2cafe71", "row_index": 489, "timestamp": "2019-08-11T09:05:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5fe653-a61a-4ff6-84dc-475ef2cafe71", "eventTime": "2019-08-11T09:05:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5fe653-a61a-4ff6-84dc-475ef2cafe71", "record_id": "flaws_cloudtrail:0000490:eb5fe653-a61a-4ff6-84dc-475ef2cafe71", "row_index": 490, "timestamp": "2019-08-11T09:05:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5fe653-a61a-4ff6-84dc-475ef2cafe71", "eventTime": "2019-08-11T09:05:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f14dcc95-fee0-491d-aeff-7410db72e6a2", "record_id": "flaws_cloudtrail:0000491:f14dcc95-fee0-491d-aeff-7410db72e6a2", "row_index": 491, "timestamp": "2019-08-11T09:05:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f14dcc95-fee0-491d-aeff-7410db72e6a2", "eventTime": "2019-08-11T09:05:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f14dcc95-fee0-491d-aeff-7410db72e6a2", "record_id": "flaws_cloudtrail:0000492:f14dcc95-fee0-491d-aeff-7410db72e6a2", "row_index": 492, "timestamp": "2019-08-11T09:05:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f14dcc95-fee0-491d-aeff-7410db72e6a2", "eventTime": "2019-08-11T09:05:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5675c353-2f2c-4d4c-b6df-b0b8f62fd66f", "record_id": "flaws_cloudtrail:0000493:5675c353-2f2c-4d4c-b6df-b0b8f62fd66f", "row_index": 493, "timestamp": "2019-08-11T09:05:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5675c353-2f2c-4d4c-b6df-b0b8f62fd66f", "eventTime": "2019-08-11T09:05:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5675c353-2f2c-4d4c-b6df-b0b8f62fd66f", "record_id": "flaws_cloudtrail:0000494:5675c353-2f2c-4d4c-b6df-b0b8f62fd66f", "row_index": 494, "timestamp": "2019-08-11T09:05:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5675c353-2f2c-4d4c-b6df-b0b8f62fd66f", "eventTime": "2019-08-11T09:05:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ab6a30-f564-4af1-aec1-bd37c834d234", "record_id": "flaws_cloudtrail:0000495:36ab6a30-f564-4af1-aec1-bd37c834d234", "row_index": 495, "timestamp": "2019-08-11T09:06:38Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ab6a30-f564-4af1-aec1-bd37c834d234", "eventTime": "2019-08-11T09:06:38Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ab6a30-f564-4af1-aec1-bd37c834d234", "record_id": "flaws_cloudtrail:0000496:36ab6a30-f564-4af1-aec1-bd37c834d234", "row_index": 496, "timestamp": "2019-08-11T09:06:38Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ab6a30-f564-4af1-aec1-bd37c834d234", "eventTime": "2019-08-11T09:06:38Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332780c-bff7-4c92-91c9-885b36420b", "record_id": "flaws_cloudtrail:0000497:332780c-bff7-4c92-91c9-885b36420b", "row_index": 497, "timestamp": "2019-08-11T09:06:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332780c-bff7-4c92-91c9-885b36420b", "eventTime": "2019-08-11T09:06:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332780c-bff7-4c92-91c9-885b36420b", "record_id": "flaws_cloudtrail:0000498:332780c-bff7-4c92-91c9-885b36420b", "row_index": 498, "timestamp": "2019-08-11T09:06:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332780c-bff7-4c92-91c9-885b36420b", "eventTime": "2019-08-11T09:06:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2ac5841-dab1-4eac-ad41-969b5f75405", "record_id": "flaws_cloudtrail:0000499:e2ac5841-dab1-4eac-ad41-969b5f75405", "row_index": 499, "timestamp": "2019-08-11T09:11:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2ac5841-dab1-4eac-ad41-969b5f75405", "eventTime": "2019-08-11T09:11:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2ac5841-dab1-4eac-ad41-969b5f75405", "record_id": "flaws_cloudtrail:0000500:e2ac5841-dab1-4eac-ad41-969b5f75405", "row_index": 500, "timestamp": "2019-08-11T09:11:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2ac5841-dab1-4eac-ad41-969b5f75405", "eventTime": "2019-08-11T09:11:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "423832c0-2f02-4b34-8d68-ae3e909d8147", "record_id": "flaws_cloudtrail:0000501:423832c0-2f02-4b34-8d68-ae3e909d8147", "row_index": 501, "timestamp": "2019-08-11T09:16:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "423832c0-2f02-4b34-8d68-ae3e909d8147", "eventTime": "2019-08-11T09:16:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "423832c0-2f02-4b34-8d68-ae3e909d8147", "record_id": "flaws_cloudtrail:0000502:423832c0-2f02-4b34-8d68-ae3e909d8147", "row_index": 502, "timestamp": "2019-08-11T09:16:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "423832c0-2f02-4b34-8d68-ae3e909d8147", "eventTime": "2019-08-11T09:16:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f1d658-7874-4256-ab8e-83d9f9930a40", "record_id": "flaws_cloudtrail:0000503:21f1d658-7874-4256-ab8e-83d9f9930a40", "row_index": 503, "timestamp": "2019-08-11T09:21:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f1d658-7874-4256-ab8e-83d9f9930a40", "eventTime": "2019-08-11T09:21:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f1d658-7874-4256-ab8e-83d9f9930a40", "record_id": "flaws_cloudtrail:0000504:21f1d658-7874-4256-ab8e-83d9f9930a40", "row_index": 504, "timestamp": "2019-08-11T09:21:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f1d658-7874-4256-ab8e-83d9f9930a40", "eventTime": "2019-08-11T09:21:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e641607f-7df6-4f4d-b93f-287fa0ec94ff", "record_id": "flaws_cloudtrail:0000505:5e641607f-7df6-4f4d-b93f-287fa0ec94ff", "row_index": 505, "timestamp": "2019-08-11T09:26:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e641607f-7df6-4f4d-b93f-287fa0ec94ff", "eventTime": "2019-08-11T09:26:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e641607f-7df6-4f4d-b93f-287fa0ec94ff", "record_id": "flaws_cloudtrail:0000506:5e641607f-7df6-4f4d-b93f-287fa0ec94ff", "row_index": 506, "timestamp": "2019-08-11T09:26:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e641607f-7df6-4f4d-b93f-287fa0ec94ff", "eventTime": "2019-08-11T09:26:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a224c1-f0ce-4c34-8f4b-1c7f1a400d21", "record_id": "flaws_cloudtrail:0000507:92a224c1-f0ce-4c34-8f4b-1c7f1a400d21", "row_index": 507, "timestamp": "2019-08-11T09:31:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a224c1-f0ce-4c34-8f4b-1c7f1a400d21", "eventTime": "2019-08-11T09:31:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a224c1-f0ce-4c34-8f4b-1c7f1a400d21", "record_id": "flaws_cloudtrail:0000508:92a224c1-f0ce-4c34-8f4b-1c7f1a400d21", "row_index": 508, "timestamp": "2019-08-11T09:31:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a224c1-f0ce-4c34-8f4b-1c7f1a400d21", "eventTime": "2019-08-11T09:31:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87bf6db9-f4c1-4841-a96e-64bc4a6de5dd", "record_id": "flaws_cloudtrail:0000509:87bf6db9-f4c1-4841-a96e-64bc4a6de5dd", "row_index": 509, "timestamp": "2019-08-11T09:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87bf6db9-f4c1-4841-a96e-64bc4a6de5dd", "eventTime": "2019-08-11T09:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB5QV78WUAN7GQYQ5", "expiration": "Aug 11, 2019 4:01:50 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87bf6db9-f4c1-4841-a96e-64bc4a6de5dd", "record_id": "flaws_cloudtrail:0000510:87bf6db9-f4c1-4841-a96e-64bc4a6de5dd", "row_index": 510, "timestamp": "2019-08-11T09:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87bf6db9-f4c1-4841-a96e-64bc4a6de5dd", "eventTime": "2019-08-11T09:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB5QV78WUAN7GQYQ5", "expiration": "Aug 11, 2019 4:01:50 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cd7d7fb-5932-4d1f-8dfc-12e54880cb67", "record_id": "flaws_cloudtrail:0000511:6cd7d7fb-5932-4d1f-8dfc-12e54880cb67", "row_index": 511, "timestamp": "2019-08-11T09:36:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cd7d7fb-5932-4d1f-8dfc-12e54880cb67", "eventTime": "2019-08-11T09:36:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cd7d7fb-5932-4d1f-8dfc-12e54880cb67", "record_id": "flaws_cloudtrail:0000512:6cd7d7fb-5932-4d1f-8dfc-12e54880cb67", "row_index": 512, "timestamp": "2019-08-11T09:36:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cd7d7fb-5932-4d1f-8dfc-12e54880cb67", "eventTime": "2019-08-11T09:36:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d407b188-d453-43dc-bddc-8fa3a736388b", "record_id": "flaws_cloudtrail:0000513:d407b188-d453-43dc-bddc-8fa3a736388b", "row_index": 513, "timestamp": "2019-08-11T09:41:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d407b188-d453-43dc-bddc-8fa3a736388b", "eventTime": "2019-08-11T09:41:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d407b188-d453-43dc-bddc-8fa3a736388b", "record_id": "flaws_cloudtrail:0000514:d407b188-d453-43dc-bddc-8fa3a736388b", "row_index": 514, "timestamp": "2019-08-11T09:41:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d407b188-d453-43dc-bddc-8fa3a736388b", "eventTime": "2019-08-11T09:41:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636c0cac-ae67-4594-bcbf-58ca611c6cdb", "record_id": "flaws_cloudtrail:0000515:636c0cac-ae67-4594-bcbf-58ca611c6cdb", "row_index": 515, "timestamp": "2019-08-11T09:46:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636c0cac-ae67-4594-bcbf-58ca611c6cdb", "eventTime": "2019-08-11T09:46:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636c0cac-ae67-4594-bcbf-58ca611c6cdb", "record_id": "flaws_cloudtrail:0000516:636c0cac-ae67-4594-bcbf-58ca611c6cdb", "row_index": 516, "timestamp": "2019-08-11T09:46:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636c0cac-ae67-4594-bcbf-58ca611c6cdb", "eventTime": "2019-08-11T09:46:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82eedde4-69c6-4b15-9cff-96728f3f002d", "record_id": "flaws_cloudtrail:0000517:82eedde4-69c6-4b15-9cff-96728f3f002d", "row_index": 517, "timestamp": "2019-08-11T09:51:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82eedde4-69c6-4b15-9cff-96728f3f002d", "eventTime": "2019-08-11T09:51:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82eedde4-69c6-4b15-9cff-96728f3f002d", "record_id": "flaws_cloudtrail:0000518:82eedde4-69c6-4b15-9cff-96728f3f002d", "row_index": 518, "timestamp": "2019-08-11T09:51:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82eedde4-69c6-4b15-9cff-96728f3f002d", "eventTime": "2019-08-11T09:51:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14fb1eac-b699-4dd4-a7bf-7b7f472e0735", "record_id": "flaws_cloudtrail:0000519:14fb1eac-b699-4dd4-a7bf-7b7f472e0735", "row_index": 519, "timestamp": "2019-08-11T09:56:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14fb1eac-b699-4dd4-a7bf-7b7f472e0735", "eventTime": "2019-08-11T09:56:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14fb1eac-b699-4dd4-a7bf-7b7f472e0735", "record_id": "flaws_cloudtrail:0000520:14fb1eac-b699-4dd4-a7bf-7b7f472e0735", "row_index": 520, "timestamp": "2019-08-11T09:56:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14fb1eac-b699-4dd4-a7bf-7b7f472e0735", "eventTime": "2019-08-11T09:56:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31bc79f-148f-45d0-be66-feaef03f9707", "record_id": "flaws_cloudtrail:0000521:a31bc79f-148f-45d0-be66-feaef03f9707", "row_index": 521, "timestamp": "2019-08-11T10:01:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31bc79f-148f-45d0-be66-feaef03f9707", "eventTime": "2019-08-11T10:01:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31bc79f-148f-45d0-be66-feaef03f9707", "record_id": "flaws_cloudtrail:0000522:a31bc79f-148f-45d0-be66-feaef03f9707", "row_index": 522, "timestamp": "2019-08-11T10:01:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31bc79f-148f-45d0-be66-feaef03f9707", "eventTime": "2019-08-11T10:01:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77110c27-f494-4348-af0d-355771844647", "record_id": "flaws_cloudtrail:0000523:77110c27-f494-4348-af0d-355771844647", "row_index": 523, "timestamp": "2019-08-11T10:06:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77110c27-f494-4348-af0d-355771844647", "eventTime": "2019-08-11T10:06:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77110c27-f494-4348-af0d-355771844647", "record_id": "flaws_cloudtrail:0000524:77110c27-f494-4348-af0d-355771844647", "row_index": 524, "timestamp": "2019-08-11T10:06:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77110c27-f494-4348-af0d-355771844647", "eventTime": "2019-08-11T10:06:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61fdfb0a-3605-42ef-aac2-0d37f260d625", "record_id": "flaws_cloudtrail:0000525:61fdfb0a-3605-42ef-aac2-0d37f260d625", "row_index": 525, "timestamp": "2019-08-11T10:12:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61fdfb0a-3605-42ef-aac2-0d37f260d625", "eventTime": "2019-08-11T10:12:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61fdfb0a-3605-42ef-aac2-0d37f260d625", "record_id": "flaws_cloudtrail:0000526:61fdfb0a-3605-42ef-aac2-0d37f260d625", "row_index": 526, "timestamp": "2019-08-11T10:12:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61fdfb0a-3605-42ef-aac2-0d37f260d625", "eventTime": "2019-08-11T10:12:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8689aad8-10d3-4e58-b381-e8d92a9d6445", "record_id": "flaws_cloudtrail:0000527:8689aad8-10d3-4e58-b381-e8d92a9d6445", "row_index": 527, "timestamp": "2019-08-11T10:17:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8689aad8-10d3-4e58-b381-e8d92a9d6445", "eventTime": "2019-08-11T10:17:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8689aad8-10d3-4e58-b381-e8d92a9d6445", "record_id": "flaws_cloudtrail:0000528:8689aad8-10d3-4e58-b381-e8d92a9d6445", "row_index": 528, "timestamp": "2019-08-11T10:17:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8689aad8-10d3-4e58-b381-e8d92a9d6445", "eventTime": "2019-08-11T10:17:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46664-1947-4d50-834a-20d89f3ad40e", "record_id": "flaws_cloudtrail:0000529:46664-1947-4d50-834a-20d89f3ad40e", "row_index": 529, "timestamp": "2019-08-11T10:20:25Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46664-1947-4d50-834a-20d89f3ad40e", "eventTime": "2019-08-11T10:20:25Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46664-1947-4d50-834a-20d89f3ad40e", "record_id": "flaws_cloudtrail:0000530:46664-1947-4d50-834a-20d89f3ad40e", "row_index": 530, "timestamp": "2019-08-11T10:20:25Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46664-1947-4d50-834a-20d89f3ad40e", "eventTime": "2019-08-11T10:20:25Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ffc4afa-6d08-400d-af00-ece75fe3f592", "record_id": "flaws_cloudtrail:0000531:9ffc4afa-6d08-400d-af00-ece75fe3f592", "row_index": 531, "timestamp": "2019-08-11T10:20:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ffc4afa-6d08-400d-af00-ece75fe3f592", "eventTime": "2019-08-11T10:20:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ffc4afa-6d08-400d-af00-ece75fe3f592", "record_id": "flaws_cloudtrail:0000532:9ffc4afa-6d08-400d-af00-ece75fe3f592", "row_index": 532, "timestamp": "2019-08-11T10:20:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ffc4afa-6d08-400d-af00-ece75fe3f592", "eventTime": "2019-08-11T10:20:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ebc9bc-13f3-4ccb-90fa-ebcdbeb13613", "record_id": "flaws_cloudtrail:0000533:49ebc9bc-13f3-4ccb-90fa-ebcdbeb13613", "row_index": 533, "timestamp": "2019-08-11T10:20:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ebc9bc-13f3-4ccb-90fa-ebcdbeb13613", "eventTime": "2019-08-11T10:20:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ebc9bc-13f3-4ccb-90fa-ebcdbeb13613", "record_id": "flaws_cloudtrail:0000534:49ebc9bc-13f3-4ccb-90fa-ebcdbeb13613", "row_index": 534, "timestamp": "2019-08-11T10:20:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ebc9bc-13f3-4ccb-90fa-ebcdbeb13613", "eventTime": "2019-08-11T10:20:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff66f568-0ee9-4ab9-b226-2490d5f0db6f", "record_id": "flaws_cloudtrail:0000535:ff66f568-0ee9-4ab9-b226-2490d5f0db6f", "row_index": 535, "timestamp": "2019-08-11T10:22:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff66f568-0ee9-4ab9-b226-2490d5f0db6f", "eventTime": "2019-08-11T10:22:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff66f568-0ee9-4ab9-b226-2490d5f0db6f", "record_id": "flaws_cloudtrail:0000536:ff66f568-0ee9-4ab9-b226-2490d5f0db6f", "row_index": 536, "timestamp": "2019-08-11T10:22:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff66f568-0ee9-4ab9-b226-2490d5f0db6f", "eventTime": "2019-08-11T10:22:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0c479f-eb68-4488-b467-709e88a8764a", "record_id": "flaws_cloudtrail:0000537:8e0c479f-eb68-4488-b467-709e88a8764a", "row_index": 537, "timestamp": "2019-08-11T10:27:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0c479f-eb68-4488-b467-709e88a8764a", "eventTime": "2019-08-11T10:27:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0c479f-eb68-4488-b467-709e88a8764a", "record_id": "flaws_cloudtrail:0000538:8e0c479f-eb68-4488-b467-709e88a8764a", "row_index": 538, "timestamp": "2019-08-11T10:27:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0c479f-eb68-4488-b467-709e88a8764a", "eventTime": "2019-08-11T10:27:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb9062bc-d78e-4ea4-803c-0b5390a1ebd1", "record_id": "flaws_cloudtrail:0000539:eb9062bc-d78e-4ea4-803c-0b5390a1ebd1", "row_index": 539, "timestamp": "2019-08-11T10:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb9062bc-d78e-4ea4-803c-0b5390a1ebd1", "eventTime": "2019-08-11T10:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJCG0DLPM56L5T6CL", "expiration": "Aug 11, 2019 4:40:57 PM", "sessionToken": "AgoJb3JpZ2luX2VjEDMaCXVzLXdlc3QtMiJGMEQCIGKyOsw1fsLkVbD7ldOlzByXiwxJQkb3LZEHzm8Ue7aOAiAOAXJFDKGYdDMSuyHh0roOVJ+WdOwAfNea4tywjqFY4CrjAwi8//////////8BEAAaDDk3NTQyNjI2MjAyOSIMxfRkyJKA4y2X+gYmKrcDcO9pZ0Gk/eXtpY6rSh8d36ej+70UIGod1yuH+7Zt9pe5PNI6sPzg/9Pm7gfX0Gg4NJFXX52QZ1IJUS5LSt8QNtrtyv3L5PJjXzWHR1hvw9nQkPx7nxCtk/y++Z6Ou6Wy64MRMBT8AB2V2ARGp2nZVAZz0WnPPIJ7Jo6YpY6eUUxC7t4ERFdrrzYfAQFqikhH3IWq5cGs7z3TTCZV1ROLAdE6cV2xzjaSbtPBd0fGA6jQi8pF1Q6xFmnuRbqmo40HVtDpqMJVEhYTeucedIZzuURjhd8ArusPE0jEHyFA3DNpNXKTSxjf8HnVQEohVREHMiMb6kC42KKhyA3JBUoxbMRNafVYJ69HmUcNYcRlODM0OgaBkNV2FC0PjVHjkzTBUbFf+a+muhMz3te8NygOhsCcLYKRgobv122gHdvnsjkO9RM7iiP/rRVb/5mv5Nao9PmgeUPuojYjVYPZpdOPoB6MKum34nSEsScB++PQpr3cO5vlVUKAc3zu8sx7U4Gz2H5rQUeMulP2iVZH4Xhnd4dPPhk8xb+ClW9U3DqYywk94K2VTPEj+y82lE6Ds+vmjG+rMxgdFzCd3b/qBTq1AfgLzlNSywVD+LrV65oUCuIytrfor3hlLVhRGrYo3nEpfQAzKRfk/UpcPm1TlG2LwuePrqQ8GeDEpzSMlBuip+OroVFEQlVlaEkKLJU4MchrXYsop4KqlMxlX5KN5mih4xE6hM2yUoPlwumBStnoX55+buKgXIieBWT2/Bij+AyGhh6tiAbZYZ95EppWVp8suCoO9jzI2JQele+ggAmXAhfXUHx1slyr9goTRUauL+VV8izIhy8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb9062bc-d78e-4ea4-803c-0b5390a1ebd1", "record_id": "flaws_cloudtrail:0000540:eb9062bc-d78e-4ea4-803c-0b5390a1ebd1", "row_index": 540, "timestamp": "2019-08-11T10:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb9062bc-d78e-4ea4-803c-0b5390a1ebd1", "eventTime": "2019-08-11T10:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJCG0DLPM56L5T6CL", "expiration": "Aug 11, 2019 4:40:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3fa7ee4-e1ba-400f-9539-ff51740", "record_id": "flaws_cloudtrail:0000541:a3fa7ee4-e1ba-400f-9539-ff51740", "row_index": 541, "timestamp": "2019-08-11T10:32:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3fa7ee4-e1ba-400f-9539-ff51740", "eventTime": "2019-08-11T10:32:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3fa7ee4-e1ba-400f-9539-ff51740", "record_id": "flaws_cloudtrail:0000542:a3fa7ee4-e1ba-400f-9539-ff51740", "row_index": 542, "timestamp": "2019-08-11T10:32:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3fa7ee4-e1ba-400f-9539-ff51740", "eventTime": "2019-08-11T10:32:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b75b3cd-c453-4b29-acbb-908f3a018c66", "record_id": "flaws_cloudtrail:0000543:5b75b3cd-c453-4b29-acbb-908f3a018c66", "row_index": 543, "timestamp": "2019-08-11T10:37:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b75b3cd-c453-4b29-acbb-908f3a018c66", "eventTime": "2019-08-11T10:37:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b75b3cd-c453-4b29-acbb-908f3a018c66", "record_id": "flaws_cloudtrail:0000544:5b75b3cd-c453-4b29-acbb-908f3a018c66", "row_index": 544, "timestamp": "2019-08-11T10:37:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b75b3cd-c453-4b29-acbb-908f3a018c66", "eventTime": "2019-08-11T10:37:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24cf15ed-b93c-473c-b25c-700c9b6f2890", "record_id": "flaws_cloudtrail:0000545:24cf15ed-b93c-473c-b25c-700c9b6f2890", "row_index": 545, "timestamp": "2019-08-11T10:42:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24cf15ed-b93c-473c-b25c-700c9b6f2890", "eventTime": "2019-08-11T10:42:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24cf15ed-b93c-473c-b25c-700c9b6f2890", "record_id": "flaws_cloudtrail:0000546:24cf15ed-b93c-473c-b25c-700c9b6f2890", "row_index": 546, "timestamp": "2019-08-11T10:42:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24cf15ed-b93c-473c-b25c-700c9b6f2890", "eventTime": "2019-08-11T10:42:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266cfba0-c8a8-4afb-96da-dd1466919b8a", "record_id": "flaws_cloudtrail:0000547:266cfba0-c8a8-4afb-96da-dd1466919b8a", "row_index": 547, "timestamp": "2019-08-11T10:46:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAJCG0DLPM56L5T6CL", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266cfba0-c8a8-4afb-96da-dd1466919b8a", "eventTime": "2019-08-11T10:46:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAJCG0DLPM56L5T6CL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T10:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266cfba0-c8a8-4afb-96da-dd1466919b8a", "record_id": "flaws_cloudtrail:0000548:266cfba0-c8a8-4afb-96da-dd1466919b8a", "row_index": 548, "timestamp": "2019-08-11T10:46:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAJCG0DLPM56L5T6CL", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266cfba0-c8a8-4afb-96da-dd1466919b8a", "eventTime": "2019-08-11T10:46:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAJCG0DLPM56L5T6CL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T10:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0c8b3a-59ef-41c6-b01e-2968ec73b2e3", "record_id": "flaws_cloudtrail:0000549:4e0c8b3a-59ef-41c6-b01e-2968ec73b2e3", "row_index": 549, "timestamp": "2019-08-11T10:47:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0c8b3a-59ef-41c6-b01e-2968ec73b2e3", "eventTime": "2019-08-11T10:47:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0c8b3a-59ef-41c6-b01e-2968ec73b2e3", "record_id": "flaws_cloudtrail:0000550:4e0c8b3a-59ef-41c6-b01e-2968ec73b2e3", "row_index": 550, "timestamp": "2019-08-11T10:47:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0c8b3a-59ef-41c6-b01e-2968ec73b2e3", "eventTime": "2019-08-11T10:47:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54f1dff8-4986-4a78-ab7d-de874933830f", "record_id": "flaws_cloudtrail:0000551:54f1dff8-4986-4a78-ab7d-de874933830f", "row_index": 551, "timestamp": "2019-08-11T10:52:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54f1dff8-4986-4a78-ab7d-de874933830f", "eventTime": "2019-08-11T10:52:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54f1dff8-4986-4a78-ab7d-de874933830f", "record_id": "flaws_cloudtrail:0000552:54f1dff8-4986-4a78-ab7d-de874933830f", "row_index": 552, "timestamp": "2019-08-11T10:52:14Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54f1dff8-4986-4a78-ab7d-de874933830f", "eventTime": "2019-08-11T10:52:14Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7df109a-3861-4e75-af19-48c41a8accfa", "record_id": "flaws_cloudtrail:0000553:b7df109a-3861-4e75-af19-48c41a8accfa", "row_index": 553, "timestamp": "2019-08-11T10:53:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7df109a-3861-4e75-af19-48c41a8accfa", "eventTime": "2019-08-11T10:53:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7df109a-3861-4e75-af19-48c41a8accfa", "record_id": "flaws_cloudtrail:0000554:b7df109a-3861-4e75-af19-48c41a8accfa", "row_index": 554, "timestamp": "2019-08-11T10:53:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7df109a-3861-4e75-af19-48c41a8accfa", "eventTime": "2019-08-11T10:53:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a013ca-6061-4c8b-afc7-81a8a4940a2a", "record_id": "flaws_cloudtrail:0000555:e6a013ca-6061-4c8b-afc7-81a8a4940a2a", "row_index": 555, "timestamp": "2019-08-11T10:53:53Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a013ca-6061-4c8b-afc7-81a8a4940a2a", "eventTime": "2019-08-11T10:53:53Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACWXLVP1BAKZDBB2N", "expiration": "Aug 11, 2019 10:53:53 PM", "sessionToken": "FQoGZXIvYXdzEEQaDN0bc3DRZvcZ6r1Y/iKsAfcdp1/AsdVkbkgD2sHOW8Ovwe6k4lhsIrGTDEJXQGMFMOfatN+/5dX4UIGiDpPilIh+airXW7t0MCfTn2tjY/GkIgr336N7QxcAPbx9qWEB0jNEz43Z+v/jp9OuMkaewIVfAwJn+FWl0cMU+lFKgDeitHJPiUYZWxx5CHknigttJnVE3hK18YeTp5V0R8tPb594mPg2uh26DWtTJ9Ad4QKUMM3Ty/YcOuTcF4cowee/6gU="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a013ca-6061-4c8b-afc7-81a8a4940a2a", "record_id": "flaws_cloudtrail:0000556:e6a013ca-6061-4c8b-afc7-81a8a4940a2a", "row_index": 556, "timestamp": "2019-08-11T10:53:53Z", "event_type": "GetSessionToken", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a013ca-6061-4c8b-afc7-81a8a4940a2a", "eventTime": "2019-08-11T10:53:53Z", "eventName": "GetSessionToken", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACWXLVP1BAKZDBB2N", "expiration": "Aug 11, 2019 10:53:53 PM", "sessionToken": "FQoGZXIvYXdzEEQaDN0bc3DRZvcZ6r1Y/iKsAfcdp1/AsdVkbkgD2sHOW8Ovwe6k4lhsIrGTDEJXQGMFMOfatN+/5dX4UIGiDpPilIh+airXW7t0MCfTn2tjY/GkIgr336N7QxcAPbx9qWEB0jNEz43Z+v/jp9OuMkaewIVfAwJn+FWl0cMU+lFKgDeitHJPiUYZWxx5CHknigttJnVE3hK18YeTp5V0R8tPb594mPg2uh26DWtTJ9Ad4QKUMM3Ty/YcOuTcF4cowee/6gU="}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11e049371-f661-4522-a1d5-e1791cf2d295", "record_id": "flaws_cloudtrail:0000557:11e049371-f661-4522-a1d5-e1791cf2d295", "row_index": 557, "timestamp": "2019-08-11T10:54:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIACWXLVP1BAKZDBB2N", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11e049371-f661-4522-a1d5-e1791cf2d295", "eventTime": "2019-08-11T10:54:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIACWXLVP1BAKZDBB2N", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T10:53:53Z"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11e049371-f661-4522-a1d5-e1791cf2d295", "record_id": "flaws_cloudtrail:0000558:11e049371-f661-4522-a1d5-e1791cf2d295", "row_index": 558, "timestamp": "2019-08-11T10:54:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIACWXLVP1BAKZDBB2N", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11e049371-f661-4522-a1d5-e1791cf2d295", "eventTime": "2019-08-11T10:54:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "[aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIACWXLVP1BAKZDBB2N", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T10:53:53Z"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cf567af-193f-4d36-b248-ea321b04ff15", "record_id": "flaws_cloudtrail:0000559:5cf567af-193f-4d36-b248-ea321b04ff15", "row_index": 559, "timestamp": "2019-08-11T10:56:24Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cf567af-193f-4d36-b248-ea321b04ff15", "eventTime": "2019-08-11T10:56:24Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cf567af-193f-4d36-b248-ea321b04ff15", "record_id": "flaws_cloudtrail:0000560:5cf567af-193f-4d36-b248-ea321b04ff15", "row_index": 560, "timestamp": "2019-08-11T10:56:24Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cf567af-193f-4d36-b248-ea321b04ff15", "eventTime": "2019-08-11T10:56:24Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed19fa1-9942-4252-9320-efdafdf0dd13", "record_id": "flaws_cloudtrail:0000561:aed19fa1-9942-4252-9320-efdafdf0dd13", "row_index": 561, "timestamp": "2019-08-11T10:56:48Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed19fa1-9942-4252-9320-efdafdf0dd13", "eventTime": "2019-08-11T10:56:48Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed19fa1-9942-4252-9320-efdafdf0dd13", "record_id": "flaws_cloudtrail:0000562:aed19fa1-9942-4252-9320-efdafdf0dd13", "row_index": 562, "timestamp": "2019-08-11T10:56:48Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed19fa1-9942-4252-9320-efdafdf0dd13", "eventTime": "2019-08-11T10:56:48Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31a1934-7a50-402c-a5d6-3a24fd9766b7", "record_id": "flaws_cloudtrail:0000563:a31a1934-7a50-402c-a5d6-3a24fd9766b7", "row_index": 563, "timestamp": "2019-08-11T10:57:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31a1934-7a50-402c-a5d6-3a24fd9766b7", "eventTime": "2019-08-11T10:57:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31a1934-7a50-402c-a5d6-3a24fd9766b7", "record_id": "flaws_cloudtrail:0000564:a31a1934-7a50-402c-a5d6-3a24fd9766b7", "row_index": 564, "timestamp": "2019-08-11T10:57:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31a1934-7a50-402c-a5d6-3a24fd9766b7", "eventTime": "2019-08-11T10:57:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa40d33-be15-4291-92bd-2154eb1a6b00", "record_id": "flaws_cloudtrail:0000565:cfa40d33-be15-4291-92bd-2154eb1a6b00", "row_index": 565, "timestamp": "2019-08-11T10:57:56Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa40d33-be15-4291-92bd-2154eb1a6b00", "eventTime": "2019-08-11T10:57:56Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa40d33-be15-4291-92bd-2154eb1a6b00", "record_id": "flaws_cloudtrail:0000566:cfa40d33-be15-4291-92bd-2154eb1a6b00", "row_index": 566, "timestamp": "2019-08-11T10:57:56Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa40d33-be15-4291-92bd-2154eb1a6b00", "eventTime": "2019-08-11T10:57:56Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "707f0a57-7f27-467a-a15b-f7f6d5576816", "record_id": "flaws_cloudtrail:0000567:707f0a57-7f27-467a-a15b-f7f6d5576816", "row_index": 567, "timestamp": "2019-08-11T10:58:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "707f0a57-7f27-467a-a15b-f7f6d5576816", "eventTime": "2019-08-11T10:58:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "707f0a57-7f27-467a-a15b-f7f6d5576816", "record_id": "flaws_cloudtrail:0000568:707f0a57-7f27-467a-a15b-f7f6d5576816", "row_index": 568, "timestamp": "2019-08-11T10:58:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "707f0a57-7f27-467a-a15b-f7f6d5576816", "eventTime": "2019-08-11T10:58:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2a463ba-bb91-4c5d-9be3-eb01e6eff86b", "record_id": "flaws_cloudtrail:0000569:e2a463ba-bb91-4c5d-9be3-eb01e6eff86b", "row_index": 569, "timestamp": "2019-08-11T11:00:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2a463ba-bb91-4c5d-9be3-eb01e6eff86b", "eventTime": "2019-08-11T11:00:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2a463ba-bb91-4c5d-9be3-eb01e6eff86b", "record_id": "flaws_cloudtrail:0000570:e2a463ba-bb91-4c5d-9be3-eb01e6eff86b", "row_index": 570, "timestamp": "2019-08-11T11:00:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2a463ba-bb91-4c5d-9be3-eb01e6eff86b", "eventTime": "2019-08-11T11:00:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15897e0-265e-454a-8e19-3c4edc027fbf", "record_id": "flaws_cloudtrail:0000571:15897e0-265e-454a-8e19-3c4edc027fbf", "row_index": 571, "timestamp": "2019-08-11T11:01:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15897e0-265e-454a-8e19-3c4edc027fbf", "eventTime": "2019-08-11T11:01:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15897e0-265e-454a-8e19-3c4edc027fbf", "record_id": "flaws_cloudtrail:0000572:15897e0-265e-454a-8e19-3c4edc027fbf", "row_index": 572, "timestamp": "2019-08-11T11:01:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15897e0-265e-454a-8e19-3c4edc027fbf", "eventTime": "2019-08-11T11:01:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2140f1a-9f37-4452-95c9-3d7a0f16bde2", "record_id": "flaws_cloudtrail:0000573:d2140f1a-9f37-4452-95c9-3d7a0f16bde2", "row_index": 573, "timestamp": "2019-08-11T11:02:17Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2140f1a-9f37-4452-95c9-3d7a0f16bde2", "eventTime": "2019-08-11T11:02:17Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2140f1a-9f37-4452-95c9-3d7a0f16bde2", "record_id": "flaws_cloudtrail:0000574:d2140f1a-9f37-4452-95c9-3d7a0f16bde2", "row_index": 574, "timestamp": "2019-08-11T11:02:17Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "51.88.255.2", "user_agent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2140f1a-9f37-4452-95c9-3d7a0f16bde2", "eventTime": "2019-08-11T11:02:17Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "51.88.255.2", "userAgent": "aws-cli/1.16.127 Python/3.6.0 Windows/10 botocore/1.12.117", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff584294-0842-47c9-af1e-64c3e96c608c", "record_id": "flaws_cloudtrail:0000575:ff584294-0842-47c9-af1e-64c3e96c608c", "row_index": 575, "timestamp": "2019-08-11T11:02:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff584294-0842-47c9-af1e-64c3e96c608c", "eventTime": "2019-08-11T11:02:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff584294-0842-47c9-af1e-64c3e96c608c", "record_id": "flaws_cloudtrail:0000576:ff584294-0842-47c9-af1e-64c3e96c608c", "row_index": 576, "timestamp": "2019-08-11T11:02:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff584294-0842-47c9-af1e-64c3e96c608c", "eventTime": "2019-08-11T11:02:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d5c7f3f-2f97-42f7-8adf-f48f6c16eedd", "record_id": "flaws_cloudtrail:0000577:6d5c7f3f-2f97-42f7-8adf-f48f6c16eedd", "row_index": 577, "timestamp": "2019-08-11T11:04:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d5c7f3f-2f97-42f7-8adf-f48f6c16eedd", "eventTime": "2019-08-11T11:04:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE5OS7PNRUGHAYCLT", "expiration": "Aug 11, 2019 11:04:08 PM", "sessionToken": "AgoJb3JpZ2luX2VjEDMaCXVzLXdlc3QtMiJIMEYCIQCpRL6bnETNTVXBSzHCkz+YhMKpP05CenXpDLXNSELeMAIhAO0NeqSJ8pcvpZqv9GjUXteJpTe2UYN9nkFpiNnY+VMXKosCCLz//////////wEQABoMOTc1NDI2MjYyMDI5IgwQ3Hd57tpGzxpbq8Mq3wEZjXsC004ZmBhxW6ixYZRCjpnBibqDiCCWjJVaIIPRA20OXHh2YUGQ7FJKn8AqUaxzG2VRF8dM3kN341vMm6I/c8TXVzlVpwDQdEvqi4MrWvMPSrRjDYjIT84YIrzc7kYi3DNPV80uGEZrr20T7x4pjMk5pKUvseUfp1CZYJRKH7DZqiIPmEghBmZm6mehwVwTlPbklhwi7SmjdOjNfUP84RXuyW2GhocuTSkP5SB2tr3xQVCILTvTDxuLtiXVlJ1Z2aOApGXVTOkyP0tAFlY2zDs2NZ6RCkdObuQ5dGltMKjsv+oFOrMBpqei2AZyaCN/OCU6SrDydIhyiUBkuFDOnsrOP3GgBf+n6VdLZ/rGqgRQuATY8akTGatQkFr3CP9t/dtfDv5o2rnkXQlPvwL6KCCeGTuALR7afvK6g+MCF3To890wy/niEh+jQKXvq2nUCaFGsdfbLFCEPbpcYXvXX5eGzaSZ8Dz5KQTp64AVhrTqwuixuoDeCUJl3uxKaKIkSlVvFCoXgonOYspsOtPGUUZmZnMD1M2la8E="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3585a44e-3a8b-433b-93f5-9c506416ba6", "record_id": "flaws_cloudtrail:0000578:3585a44e-3a8b-433b-93f5-9c506416ba6", "row_index": 578, "timestamp": "2019-08-11T11:04:08Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAXBNQNUNQ5K9UXHLD", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "253.1.8.176", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3585a44e-3a8b-433b-93f5-9c506416ba6", "eventTime": "2019-08-11T11:04:08Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.1.8.176", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXBNQNUNQ5K9UXHLD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T11:04:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/11/[$LATEST]ad86d625bce2997331be97c315cea05b", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1715fa31-ed95-4b3d-a394-e64670d3ce", "record_id": "flaws_cloudtrail:0000579:1715fa31-ed95-4b3d-a394-e64670d3ce", "row_index": 579, "timestamp": "2019-08-11T11:04:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1715fa31-ed95-4b3d-a394-e64670d3ce", "eventTime": "2019-08-11T11:04:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXBNQNUNQ5K9UXHLD", "expiration": "Aug 11, 2019 11:04:08 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d5c7f3f-2f97-42f7-8adf-f48f6c16eedd", "record_id": "flaws_cloudtrail:0000580:6d5c7f3f-2f97-42f7-8adf-f48f6c16eedd", "row_index": 580, "timestamp": "2019-08-11T11:04:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d5c7f3f-2f97-42f7-8adf-f48f6c16eedd", "eventTime": "2019-08-11T11:04:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE5OS7PNRUGHAYCLT", "expiration": "Aug 11, 2019 11:04:08 PM", "sessionToken": "AgoJb3JpZ2luX2VjEDMaCXVzLXdlc3QtMiJIMEYCIQCpRL6bnETNTVXBSzHCkz+YhMKpP05CenXpDLXNSELeMAIhAO0NeqSJ8pcvpZqv9GjUXteJpTe2UYN9nkFpiNnY+VMXKosCCLz//////////wEQABoMOTc1NDI2MjYyMDI5IgwQ3Hd57tpGzxpbq8Mq3wEZjXsC004ZmBhxW6ixYZRCjpnBibqDiCCWjJVaIIPRA20OXHh2YUGQ7FJKn8AqUaxzG2VRF8dM3kN341vMm6I/c8TXVzlVpwDQdEvqi4MrWvMPSrRjDYjIT84YIrzc7kYi3DNPV80uGEZrr20T7x4pjMk5pKUvseUfp1CZYJRKH7DZqiIPmEghBmZm6mehwVwTlPbklhwi7SmjdOjNfUP84RXuyW2GhocuTSkP5SB2tr3xQVCILTvTDxuLtiXVlJ1Z2aOApGXVTOkyP0tAFlY2zDs2NZ6RCkdObuQ5dGltMKjsv+oFOrMBpqei2AZyaCN/OCU6SrDydIhyiUBkuFDOnsrOP3GgBf+n6VdLZ/rGqgRQuATY8akTGatQkFr3CP9t/dtfDv5o2rnkXQlPvwL6KCCeGTuALR7afvK6g+MCF3To890wy/niEh+jQKXvq2nUCaFGsdfbLFCEPbpcYXvXX5eGzaSZ8Dz5KQTp64AVhrTqwuixuoDeCUJl3uxKaKIkSlVvFCoXgonOYspsOtPGUUZmZnMD1M2la8E="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3585a44e-3a8b-433b-93f5-9c506416ba6", "record_id": "flaws_cloudtrail:0000581:3585a44e-3a8b-433b-93f5-9c506416ba6", "row_index": 581, "timestamp": "2019-08-11T11:04:08Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAXBNQNUNQ5K9UXHLD", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "253.1.8.176", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3585a44e-3a8b-433b-93f5-9c506416ba6", "eventTime": "2019-08-11T11:04:08Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.1.8.176", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXBNQNUNQ5K9UXHLD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T11:04:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/11/[$LATEST]ad86d625bce2997331be97c315cea05b", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1715fa31-ed95-4b3d-a394-e64670d3ce", "record_id": "flaws_cloudtrail:0000582:1715fa31-ed95-4b3d-a394-e64670d3ce", "row_index": 582, "timestamp": "2019-08-11T11:04:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1715fa31-ed95-4b3d-a394-e64670d3ce", "eventTime": "2019-08-11T11:04:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXBNQNUNQ5K9UXHLD", "expiration": "Aug 11, 2019 11:04:08 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c899ca25-964f-4cb8-a3e2-045e442ae47f", "record_id": "flaws_cloudtrail:0000583:c899ca25-964f-4cb8-a3e2-045e442ae47f", "row_index": 583, "timestamp": "2019-08-11T11:07:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c899ca25-964f-4cb8-a3e2-045e442ae47f", "eventTime": "2019-08-11T11:07:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c899ca25-964f-4cb8-a3e2-045e442ae47f", "record_id": "flaws_cloudtrail:0000584:c899ca25-964f-4cb8-a3e2-045e442ae47f", "row_index": 584, "timestamp": "2019-08-11T11:07:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c899ca25-964f-4cb8-a3e2-045e442ae47f", "eventTime": "2019-08-11T11:07:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd6615ee-5d97-407c-a570-20e6609afa67", "record_id": "flaws_cloudtrail:0000585:cd6615ee-5d97-407c-a570-20e6609afa67", "row_index": 585, "timestamp": "2019-08-11T11:12:21Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd6615ee-5d97-407c-a570-20e6609afa67", "eventTime": "2019-08-11T11:12:21Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd6615ee-5d97-407c-a570-20e6609afa67", "record_id": "flaws_cloudtrail:0000586:cd6615ee-5d97-407c-a570-20e6609afa67", "row_index": 586, "timestamp": "2019-08-11T11:12:21Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd6615ee-5d97-407c-a570-20e6609afa67", "eventTime": "2019-08-11T11:12:21Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a983890f-27c8-411d-9cf3-3bd9e929621ff", "record_id": "flaws_cloudtrail:0000587:5a983890f-27c8-411d-9cf3-3bd9e929621ff", "row_index": 587, "timestamp": "2019-08-11T11:17:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a983890f-27c8-411d-9cf3-3bd9e929621ff", "eventTime": "2019-08-11T11:17:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a983890f-27c8-411d-9cf3-3bd9e929621ff", "record_id": "flaws_cloudtrail:0000588:5a983890f-27c8-411d-9cf3-3bd9e929621ff", "row_index": 588, "timestamp": "2019-08-11T11:17:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a983890f-27c8-411d-9cf3-3bd9e929621ff", "eventTime": "2019-08-11T11:17:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949d2679-8055-4177-88d5-32d7a062ad4c", "record_id": "flaws_cloudtrail:0000589:949d2679-8055-4177-88d5-32d7a062ad4c", "row_index": 589, "timestamp": "2019-08-11T11:22:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949d2679-8055-4177-88d5-32d7a062ad4c", "eventTime": "2019-08-11T11:22:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949d2679-8055-4177-88d5-32d7a062ad4c", "record_id": "flaws_cloudtrail:0000590:949d2679-8055-4177-88d5-32d7a062ad4c", "row_index": 590, "timestamp": "2019-08-11T11:22:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949d2679-8055-4177-88d5-32d7a062ad4c", "eventTime": "2019-08-11T11:22:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34c775ca-e111-4d8c-baf1-3b6bed7453da", "record_id": "flaws_cloudtrail:0000591:34c775ca-e111-4d8c-baf1-3b6bed7453da", "row_index": 591, "timestamp": "2019-08-11T11:27:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34c775ca-e111-4d8c-baf1-3b6bed7453da", "eventTime": "2019-08-11T11:27:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34c775ca-e111-4d8c-baf1-3b6bed7453da", "record_id": "flaws_cloudtrail:0000592:34c775ca-e111-4d8c-baf1-3b6bed7453da", "row_index": 592, "timestamp": "2019-08-11T11:27:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34c775ca-e111-4d8c-baf1-3b6bed7453da", "eventTime": "2019-08-11T11:27:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45108-6969-4fe1-9fa0-16b3e0d558580", "record_id": "flaws_cloudtrail:0000593:45108-6969-4fe1-9fa0-16b3e0d558580", "row_index": 593, "timestamp": "2019-08-11T11:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45108-6969-4fe1-9fa0-16b3e0d558580", "eventTime": "2019-08-11T11:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA55J3UO6K0JK1RU43", "expiration": "Aug 11, 2019 5:36:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45108-6969-4fe1-9fa0-16b3e0d558580", "record_id": "flaws_cloudtrail:0000594:45108-6969-4fe1-9fa0-16b3e0d558580", "row_index": 594, "timestamp": "2019-08-11T11:31:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45108-6969-4fe1-9fa0-16b3e0d558580", "eventTime": "2019-08-11T11:31:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA55J3UO6K0JK1RU43", "expiration": "Aug 11, 2019 5:36:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c387df7c-f003-4448-b40a-0cba06e06b14", "record_id": "flaws_cloudtrail:0000595:c387df7c-f003-4448-b40a-0cba06e06b14", "row_index": 595, "timestamp": "2019-08-11T11:32:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c387df7c-f003-4448-b40a-0cba06e06b14", "eventTime": "2019-08-11T11:32:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c387df7c-f003-4448-b40a-0cba06e06b14", "record_id": "flaws_cloudtrail:0000596:c387df7c-f003-4448-b40a-0cba06e06b14", "row_index": 596, "timestamp": "2019-08-11T11:32:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c387df7c-f003-4448-b40a-0cba06e06b14", "eventTime": "2019-08-11T11:32:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3f1c08-653f-4a43-8eb3-2a23087e", "record_id": "flaws_cloudtrail:0000597:cb3f1c08-653f-4a43-8eb3-2a23087e", "row_index": 597, "timestamp": "2019-08-11T11:37:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3f1c08-653f-4a43-8eb3-2a23087e", "eventTime": "2019-08-11T11:37:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3f1c08-653f-4a43-8eb3-2a23087e", "record_id": "flaws_cloudtrail:0000598:cb3f1c08-653f-4a43-8eb3-2a23087e", "row_index": 598, "timestamp": "2019-08-11T11:37:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3f1c08-653f-4a43-8eb3-2a23087e", "eventTime": "2019-08-11T11:37:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "688fd424-9f2a-424b-b1a3-1ea483fe436a", "record_id": "flaws_cloudtrail:0000599:688fd424-9f2a-424b-b1a3-1ea483fe436a", "row_index": 599, "timestamp": "2019-08-11T11:42:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "688fd424-9f2a-424b-b1a3-1ea483fe436a", "eventTime": "2019-08-11T11:42:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "688fd424-9f2a-424b-b1a3-1ea483fe436a", "record_id": "flaws_cloudtrail:0000600:688fd424-9f2a-424b-b1a3-1ea483fe436a", "row_index": 600, "timestamp": "2019-08-11T11:42:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "688fd424-9f2a-424b-b1a3-1ea483fe436a", "eventTime": "2019-08-11T11:42:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac27e56a-6f82-431d-af40-632515d82", "record_id": "flaws_cloudtrail:0000601:ac27e56a-6f82-431d-af40-632515d82", "row_index": 601, "timestamp": "2019-08-11T11:47:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac27e56a-6f82-431d-af40-632515d82", "eventTime": "2019-08-11T11:47:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac27e56a-6f82-431d-af40-632515d82", "record_id": "flaws_cloudtrail:0000602:ac27e56a-6f82-431d-af40-632515d82", "row_index": 602, "timestamp": "2019-08-11T11:47:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1105, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac27e56a-6f82-431d-af40-632515d82", "eventTime": "2019-08-11T11:47:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "becf5b49-ccce-48f9-b03b-b8bd2488c87b", "record_id": "flaws_cloudtrail:0000603:becf5b49-ccce-48f9-b03b-b8bd2488c87b", "row_index": 603, "timestamp": "2019-08-11T11:52:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "becf5b49-ccce-48f9-b03b-b8bd2488c87b", "eventTime": "2019-08-11T11:52:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "becf5b49-ccce-48f9-b03b-b8bd2488c87b", "record_id": "flaws_cloudtrail:0000604:becf5b49-ccce-48f9-b03b-b8bd2488c87b", "row_index": 604, "timestamp": "2019-08-11T11:52:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "becf5b49-ccce-48f9-b03b-b8bd2488c87b", "eventTime": "2019-08-11T11:52:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74c521f-f1b0-4c65-bca9-6aec0a64e3de", "record_id": "flaws_cloudtrail:0000605:b74c521f-f1b0-4c65-bca9-6aec0a64e3de", "row_index": 605, "timestamp": "2019-08-11T11:57:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA2B11FDLR24PRLM8W", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "42.157.9.48", "user_agent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74c521f-f1b0-4c65-bca9-6aec0a64e3de", "eventTime": "2019-08-11T11:57:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "42.157.9.48", "userAgent": "aws-cli/1.16.209 Python/2.7.14 Darwin/18.6.0 botocore/1.12.199", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA2B11FDLR24PRLM8W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-11T08:31:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}